SNMP community name is world readable by default (SNMP_Lanman_Enum)

Remove the SNMP Service if it is not required. If your systems require SNMP, take steps to secure the SNMP community names using the Registry Editor and the control panel.

To remove the SNMP Service:

• For Windows NT:
  1. Open the Network control panel. (From the Start menu, select Settings, Control Panel, Network.)
  2. Click the Services tab, and then select the SNMP service.
  3. Click Remove, and then click OK to confirm the removal.
• For Windows 2000:
  1. Open the Control Panel. (From the Start menu, select Settings, Control Panel.)
  2. Double-click Add/Remove Programs, and then double-click Add/Remove Windows Components in the left pane to open the Windows Components Wizard.
  3. Select Management and Monitoring tools, and then click Details.
  4. Clear the Simple Network Management Protocol checkbox, and then click OK to save the settings.

— OR —

Change the permissions on the ValidCommunities registry key, and configure SNMP security settings in the Control Panel.

To edit the registry so that only approved users can access the SNMP Community Name:

CAUTION: Use Registry Editor at your own risk. Any change using Registry Editor may cause severe and irreparable damage and may require you to reinstall your operating system. Internet Security Systems cannot guarantee that problems caused by the use of Registry Editor can be solved.

1. Open Registry Editor. From the Windows Start menu, select Run, type regedt32, and click OK.
2. Select the HKLM\System\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities registry key.
3. From the Security menu, select Permissions to display the Registry Key Permissions dialog box.
4. Set the permissions to permit only approved users access.

— AND —

To configure Windows SNMP security settings in the control panel:

1. Open the SNMP Service security settings, using the steps listed below, depending on your version of Windows.
2. Verify that your configuration contains the following security settings:
   • At least one Accepted Community Name exists. Empty lists cause SNMP to accept requests from anyone. (This is discussed in Microsoft Knowledge Base Article Q99880. See References.)
   • The Accepted Community Names are not default or easily guessed names, such as public.
   • The Only Accept SNMP Packets from These Hosts option is selected, and one or more hosts, IP addresses, or IPX addresses are specified.
   • Each host and community name in the lists is a valid, authorized destination.

To access the SNMP service security settings:

• For Windows NT:
  1. Open the Network control panel. (From the Start menu, select Settings, Control Panel, Network.)
  2. Click the Services tab, select the SNMP Service, and then click Properties.
  3. Click the Security tab.
• For Windows 2000:
  1. Open the Control Panel. (From the Start menu, select Settings, Control Panel.)
  2. Select Administrative Tools, Services.
  3. Double-click the SNMP service, and then click the Security tab.