SHA512 Authentication Support

Hey!

It would be awesome if NPM (and NCM) supported SHA512 as an authentication protocol for SNMPv3... I have some devices that support SNMPv3 but SHA512 is the only authentication version they support. As far as I can tell, Orion supports SHA1 and MD5 but nothing more complex than that.

Any chance this is something on the radar? Or are there other Thwacksters out there that would be interested in this?

Thanks!

Ted

Find more posts tagged with

snmpv3

SNMP

npm

ncm

Status: None

Comments

rschroeder

I'd love understand the risk / likelihood of someone defeating lower securities than SHA 512.

In my environment, where we don't allow Write permissions to Solarwinds, it seems all someone could do is request statistics from any snmp-device.

I'd still support SHA512 as a feature request, though!

tsadler

@rschroederThanks for the feedback! I agree in principle about the general security of the lower SHA securities, but in this particular application, the devices in question are designed to commuinicate with connected and even autonomous vehicles, so securing them on their local networks is paramount.

And since these devices by design are meant to be managed over SNMP, write permissions is definitely something we would want to give Orion so we can operate the devcies as intended.

It's really a niche problem to have, unfortunately!

mjperkins

I put in a request for AES-512 authentication in 2017 (https://thwack.solarwinds.com/t5/NPM-Feature-Requests/Feature-Request-Support-AES-512/idi-p/566179). It is still open for voting.

Please consider upvoting (kudos, now, I guess) both requests.