TMA-CHECKPOINT-3.14
Ensure Accept RIP is not enabled
MediumLevel 2Manual reviewcheckpoint
Description
The Accept RIP is a Global property setting which you can set either to accept or reject the RIP packets which is using UDP Port 520. RIP maintains information about reachable systems and routes to those systems.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify Accept RIP under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Veiry Accept RIP is unchecked.
How it is fixed
Fix method: Guidance or infrastructure patch
Go to the following path and Configured the Accept RIP. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept RIP
Properties
- Operating systems
- Any
- Tags
- checkpointhardening
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 3.14 Ensure Accept RIP is not enabled