How to Block SNMP traffic using Application Control

06/02/2023 8 People found this article helpful 486,293 Views

Description

Resolution

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

Procedure:

The following SNMP signatures are available in App Control:

Login to the SonicWall Management GUI.
Navigate to the Policy | App Control | Status/Settings. In Gen5 TZ devices this page is under Security Services | App Control
Check the box under Enable App Control and click on the Accept button at the bottom to enable App Control.
Under App Control Advanced | Signature Tab | View Style select PROTOCOL under Category; select SNMP under Application;
Click on the configure button on respective SNMP Signatures to bring up the Edit App Control App window.
Select Enable under Block and Log.(Repeat the Step for all the Signatures listed above)
Click on OK to save.

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

Procedure:

The following SNMP signatures are available in App Control:

Login to the SonicWall Management GUI.
Navigate to the Manage | Rules |App Control. In Gen5 TZ devices this page is under Security Services | App Control
Check the box under Enable App Control and click on the Accept button at the top to enable App Control.
Under App Control Advanced | View Style select PROTOCOL under Category; select SNMP under Application;
Click on the configure button to bring up the Edit App Control App window.
Select Enable under Block and Log
Click on OK to save.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

Description:

This article describes how to block SNMP traffic between management and managed network devices using the SonicWall App Control Advanced feature.

Procedure:

The following SNMP signatures are available in App Control:

Category Name	Application Name	Signature Name	Signature ID
PROTOCOL	SNMP	Version 1	6938
PROTOCOL	SNMP	Version 2	6939
PROTOCOL	SNMP	Version 3	6940

Login to the SonicWall Management GUI.
Navigate to the Firewall | App Control Advanced page. In Gen5 TZ devices this page is under Security Services | App Control
Check the box under Enable App Control and click on the Accept button at the top to enable App Control.
Under App Control Advanced | View Style select PROTOCOL under Category; select SNMP under Application;
Click on the configure button to bring up the Edit App Control App window.
Select Enable under Block and Log
Click on OK to save.