SNMP allow list

[PuraVida]

I'm needing to restrict access to SNMP by IP. I am using the Network Services Filter as an allow list and configured the relevant IPs in the Services Table. I am using SNMP V3 but since this is traversing the internet I'd feel better only allowing necessary IPs. Will this do what I'm intending? I have performed port scans that show 161/UDP to be closed and network monitoring that uses SNMP doesn't show disconnects.

 

[ColinTaylor]

Port scans from the internet are almost always TCP, not UDP. That's because UDP is stateless and won't respond to meaningless connection attempts.

Network Services Filter only effects connections from the LAN to the internet, not the other way around. You can filter incoming connections to a limited extent (Source IP) in your WAN - Virtual Server / Port Forwarding rule.