TMA-INTUNE-MACOS-2.6.2.1
Ensure "Enable Stealth Mode" is set to "True"
Beschreibung
Stealth Mode prevents the system from responding to probing requests such as ICMP ping, effectively making the system appear invisible to network scanning. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
macOS: Intune admin center: Expand the Networking heading; Under the Firewall subheading; Verify that Enable Stealth Mode is present and set to True. On the device: Double-click com.apple.security.firewall Profile; Under the Details section; Confirm Stealth mode is set to Enabled
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Intune admin center: Select Networking then Firewall; Check Enable Stealth Mode; On the left side of the page set Enable Stealth Mode to True; Verify that Enable Stealth Mode is present and set to True
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- intune-macosintunemanual-review
- Referenz
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.2.1 Ensure "Enable Stealth Mode" is set to "True"