I have a vendor that is doing a pen test on my network and has requested that I enable SNMP and SSH. I manage the network for a small business but I'm not a firewall guy. First off what are the security implications of doing this for the vendor, and how would this be accomplished? Thanks in advance and I've attached the text they sent in an email below...
Set/Enable SNMP and set the read-only community string to public to a custom string.
Set/Enable SSH / Telnet
Vendor will require a read-only account for each device to gather additional data and enhance results per the scope of work. This account does not require change-level access but should be able to run commands such as “show running-config” and “show arp”. SSH is preferred but telnet can be used if device only supports telnet.
We require read-only access so that routing tables, mac...