What are the recommended Security Settings for KACE SMA v10?
I'm thinking in terms of obtaining the most accurate inventory using the various options available in Security Settings.
Options include SSH, SNMP Read, SNMP Trap, mDNS, Db Access, SSL, API, Munin.
Answers (2)
The settings which are recommended:
The functions you need (plus potential access by KACE support (ssh) ) need to be enabled.
The functions you don't need need to be disabled.
These settings are not linked to inventory (except you are collecting the SMA inventory using the SMA itself, then SNMP Read should be enabled so it works)
Comments:
-
Thank you Niko_k - DEN15E 4 years ago
Here is a knowledge base article that talks about performance considerations and best practices.
https://support.quest.com/kb/234057/kace-sma-performance-considerations-and-best-practices
The topic for this KB is "Best Practices for Securing your SMA" which contains an attached PDF file. (Best Practices for Secure SMA Deployment-Jan2019)
I provided both as I believe they are good resources to review.
