WEBVTT

00:00.660 --> 00:08.070
Well, we certainly couldn't help but speak of countermeasures to enumeration as we were discussing

00:08.070 --> 00:09.360
enumeration topics.

00:09.780 --> 00:16.710
But I did want to take a moment and cover some more with you and give you a feel for how every single

00:16.710 --> 00:22.530
protocol that an organization runs, how you're going to want to think about hardening that protocol,

00:22.530 --> 00:26.220
especially if it is clear text based by default.

00:26.580 --> 00:29.250
Let's talk about simple network management protocol.

00:29.490 --> 00:36.510
You remember our discussion and you remember that version three of Simple Network Management Protocol

00:36.720 --> 00:44.760
is going to be able to equip you with excellent varying levels of strength authentication and encryption.

00:45.090 --> 00:49.740
So finally, simple network management protocol brings security to the equation.

00:49.830 --> 00:51.090
That's version three.

00:51.420 --> 00:54.840
So what do you do if you're stuck with version two C?

00:55.080 --> 00:56.910
Well, you're going to encrypt it.

00:57.150 --> 00:58.200
Yeah, absolutely.

00:58.200 --> 01:02.850
You're going to send it over IP tunnels, for example.

01:03.270 --> 01:10.110
Notice I didn't mention version one there, because if you're running version one, my goodness, get

01:10.110 --> 01:11.550
out of the bunker.

01:11.850 --> 01:18.960
And you know, my gosh, that is I mean, I have not encountered version one in the wild in a long,

01:18.960 --> 01:19.710
long time.

01:20.580 --> 01:28.950
Another thing to consider is ripping out all the agents, all the methods, no management tools for

01:28.950 --> 01:35.550
simple network management protocol should exist in your environment except for where they are absolutely

01:35.550 --> 01:36.360
required.

01:36.540 --> 01:37.680
Yeah, absolutely.

01:37.680 --> 01:45.510
Get rid of all of the traces of simple network management protocol from a client perspective, from

01:45.510 --> 01:50.640
a workstation perspective, from a server perspective, get rid of it where it's not needed.

01:50.910 --> 01:56.130
This is something that I can tell you for every single service we mention in this course.