# How to handle forced security changes during software update **URL:** \ **Category:** ePMP\ **Created:** [October 18, 2022, 8:35am UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074 "2022-10-18T08:35:46Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![MW\_WISP](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/mw_wisp/32/12227_2.png) [@MW\_WISP](https://community.cambiumnetworks.com/u/MW_WISP)\ **Post date:** [October 18, 2022, 8:35am UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/1 "2022-10-18T08:35:46Z")
> [@Forced passwords and SNMP community strings change](https://community.cambiumnetworks.com/t/forced-passwords-and-snmp-community-strings-change/88944): > > Affected platforms: All platforms Affected versions: 4.7.0, 5.3.0 and above Network security vulnerabilities are constantly evolving as threat actors seek new and intuitive ways to gain access to a business’s network). Cambium Networks is constantly monitoring and preventing the equipment security risks. Current changes follow recently discovered security risks in users authentication algorithms and equipment configurations via SNMP. They affect default password and SNMP communities behavior… Hi @Andrii although I think it is a good thing to force the management of passwords and communities, this can lead to heavy interventions on the management of an existing network. For example, modify of a community must be done on the device, management software, monitoring, etc. etc. Can we ask to rethink, before the final version, to review the mandatory implementation of these rules? Thank you ---
**Author:** ![Andrii](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/andrii/32/33514_2.png) [@Andrii](https://community.cambiumnetworks.com/u/Andrii)\ **Post date:** [October 18, 2022, 1:38pm UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/2 "2022-10-18T13:38:48Z")
I don’t think I’ve got you right. Do you mean not to force passwords and communities change? If yes, then you can prepare it in your own temp before upgrading your network. ---
**Author:** ![MW\_WISP](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/mw_wisp/32/12227_2.png) [@MW\_WISP](https://community.cambiumnetworks.com/u/MW_WISP)\ **Post date:** [October 18, 2022, 1:46pm UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/3 "2022-10-18T13:46:10Z")
> [@Andrii\_Khmelnytskyi](#): > > you can prepare it in your own temp before upgrading your network. Thank you for your answer. I don’t think any of you have experience managing thousands devices, because that “you can prepare your network” is simplistic and inadequate. Bye ---
**Author:** ![Andrii](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/andrii/32/33514_2.png) [@Andrii](https://community.cambiumnetworks.com/u/Andrii)\ **Post date:** [October 18, 2022, 2:12pm UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/4 "2022-10-18T14:12:59Z")
Yeap! We have just the experience of creating those devices and management tools for them. Passwords and communities are changed by one single template in CnMaestro. Are you using Radius authentication? What issues are yo expecting? ---
**Author:** ![Douglas\_Generous](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/d/898d66/32.png) [@Douglas\_Generous](https://community.cambiumnetworks.com/u/Douglas_Generous)\ **Post date:** [October 20, 2022, 6:27pm UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/5 "2022-10-20T18:27:14Z")
Andrii, I think what is meant that if these are currently set to non-default, do not force the change since the operator has already made the required changes. Changes I would prefer over the current security measures: For SNMP, setup an authorized IP subnet where snmp request should come from and drop all other requests not from that subnet. Webpage access requires more than simple long passwords, if you are not providing a banning method with reporting then it is still just a matter of time before the password is cracked. Longer passwords will take longer but the lack of control and active reporting makes this useless in terms of security. Having an ACL of sorts or a system similar to the old DenyHosts system would actually prevent unauthorized access. ---
**Author:** ![system](https://d1okf4ta8xniw3.cloudfront.net/original/3X/c/d/cd4301339a1ee0b92b361a580797b682408b951e.png) [@system](https://community.cambiumnetworks.com/u/system)\ **Post date:** [October 20, 2023, 6:28pm UTC](https://community.cambiumnetworks.com/t/how-to-handle-forced-security-changes-during-software-update/89074/6 "2023-10-20T18:28:12Z")
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.