Highlights of the new SNMPv3 proposals include methods for providing:

• authentication over open networks which protect against modification of information, masquerade, and message stream modification,
• privacy which protects against disclosure threats,
• a new administrative framework including view-based access control, and
• remote configuration of SNMP manageable systems, via secure set operations. Secure sets are necessary because maintaining security requires frequent changes of secrets within each SNMP entity on possibly very large networks.

Support for SNMPv3 has been added to an entire family of products. The products demonstrated at Networld + Interop this week include the EMANATE Extensible Agent System and the SNMP Security Pack.

The EMANATE Extensible Agent System now supports SNMPv3 transactions, in addition to the previously announced and supported SNMPv1, SNMPv2c, and SNMPv2* protocol operations. The EMANATE Extensible Agent System is the industry's leading extensible master agent/subagent system for use in network management, system management, application management, manager-to-manager communications, and proxy management of legacy systems.

The SNMP Security Pack provides secure management station communications for Hewlett-Packard's OpenView Network Node Manager product. Other management stations could also take advantage of the SNMP Security Pack.

Networld + Interop Atlanta `97 demonstrations in the SNMP Research International booth, 5605, show EMANATE agents running on HP/UX, Solaris, Windows NT, and embedded systems being managed securely via SNMPv3 by the industry's leading management station platform, Hewlett Packard's OpenView Network Node Manager (NNM). The demonstration includes secure manager-to-manager communication of topology information between distributed copies of NNM using remote data collection stations.

The demonstration also highlights Security Configuration Plus, which is a TickleMan-based product that makes it easy to perform frequently encountered tasks such as those required to configure and administer users, destinations, and security configurations. For example Security Configuration Plus can be used by a security administrator to add and delete users, manage their passwords, and their access rights on all SNMPv3 nodes in the network.

Security Configuration Plus has been extended and now supports the remote configuration capabilities specified by SNMPv3.

About SNMP Research International, Inc.:

SNMP Research International produces a complete family of management products based on SNMPv1, SNMPv2c, SNMPv2*, SNMPv3, and other protocols for agents, management stations, and mid-level managers. These products form the basis of many of today's SNMP products offered by leading networking companies. The founder of SNMP Research, Dr. Jeff Case, has long been a contributor in the area of SNMP and has authored or coauthored many standards documents and articles on the topic. As a result of his efforts, SNMP Research is in a leadership position with respect to defining the standards and constructing implementations based on SNMP, the standard protocol for TCP/IP management.