TMAegis
More rules for checkpoint

TMA-CHECKPOINT-3.19

Ensure Automatic ARP Configuration NAT is enabled

MediumLevel 2Manual reviewcheckpoint

Description

Proxy ARP is a mechanism that allows the configuration of a Gateway to respond to ARP requests on behalf of other hosts.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify Automatic ARP Configuration NAT under Global Properties is enabled. SmartConsole > Gateways & Servers > select each Gateway > NAT - Network Address Translation Verify Automatic ARP Configuration NAT is checked.

How it is fixed

Fix method: Guidance or infrastructure patch

SmartConsole > Gateways & Servers > select each Gateway > NAT - Network Address Translation: check Automatic ARP Configuration (the CIS text says 'Unchecked', which contradicts the recommendation).

Properties

Operating systems
Any
Tags
checkpointfirewall-policy
Reference
CIS Check Point Firewall Benchmark v1.1.0 - 3.19 Ensure Automatic ARP Configuration NAT is enabled