Way back, I was told ports 161, 162 TCP should be blocked on the firewall. Can't remember why. Something about unwanted requests maybe?