Dit regelen configureert simple network management protocol snmp snmp is set to disabled of not installed via Microsoft Intune apparaat configuratie beleid of compliance policies om Windows endpoints te beveiligen volgens security best practices.
Vereisten
Microsoft Intune via device configuratiebeleidsregels
Implementatie
Gebruik PowerShell-script simple-network-management-protocol-snmp-snmp-is-set-to-disabled-or-not-installed.ps1 (functie Invoke-Implementation) – Implementeren.
Gebruik PowerShell-script simple-network-management-protocol-snmp-snmp-is-set-to-disabled-or-not-installed.ps1 (functie Invoke-Monitoring) – Monitoren.
monitoring
Gebruik PowerShell-script simple-network-management-protocol-snmp-snmp-is-set-to-disabled-or-not-installed.ps1 (functie Invoke-Monitoring) – Controleren.
Remediatie
Gebruik PowerShell-script simple-network-management-protocol-snmp-snmp-is-set-to-disabled-or-not-installed.ps1 (functie Invoke-Remediation) – Herstellen.
Compliance en Auditing
Beleid documentatie
Compliance & Frameworks
CIS M365: Control 18.9.19.2 (L1) - CIS Security Benchmark aanbevelingen
BIO: 16.01 - BIO Baseline Informatiebeveiliging Overheid - 16.01 - Gebeurtenissen logging en audittrails
ISO 27001:2022: A.12.4.1 - ISO 27001:2022 - Gebeurtenissen logging en audittrails
Automation
Gebruik het onderstaande PowerShell script om deze security control te monitoren en te implementeren. Het script bevat functies voor zowel monitoring (-Monitoring) als remediation (-Remediation).
PowerShell
<#
================================================================================
POWERSHELL SCRIPT - Nederlandse Baseline voor Veilige Cloud
================================================================================
.SYNOPSIS
Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed
.DESCRIPTION
Implementeert, monitort en herstelt: Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed
.NOTES
Filename: simple-network-management-protocol-snmp-snmp-is-set-to-disabled-or-not-installed.ps1
Author: Nederlandse Baseline voor Veilige Cloud
Version: 1.0
Workload: intune
Category: security-options
#>
#Requires -Version 5.1
[CmdletBinding()]
param()
$ErrorActionPreference = 'Stop'
function Invoke-Implementation {
<#
.SYNOPSIS
Implementeert de configuratie
#>
[CmdletBinding()]
param()
Write-Host "[INFO] Invoke-Implementation - Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed" -ForegroundColor Cyan
Invoke-Remediation
}
function Invoke-Monitoring {
<#
.SYNOPSIS
Controleert de huidige configuratie status
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed - Monitoring" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer monitoring logica voor Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed
Write-Host "[INFO] Monitoring check voor Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed" -ForegroundColor Yellow
Write-Host "[OK] Monitoring check completed" -ForegroundColor Green
}
catch {
Write-Error "Monitoring failed: $_"
throw
}
}
function Invoke-Remediation {
<#
.SYNOPSIS
Herstelt de configuratie naar de gewenste staat
#>
[CmdletBinding()]
param()
try {
Write-Host "
========================================" -ForegroundColor Cyan
Write-Host "Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed - Remediation" -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
# TODO: Implementeer remediation logica voor Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed
Write-Host "[INFO] Remediation voor Simple Network Management Protocol Snmp Snmp Is Set To Disabled of Not Installed" -ForegroundColor Yellow
Write-Host "[OK] Remediation completed" -ForegroundColor Green
}
catch {
Write-Error "Remediation failed: $_"
throw
}
}