TMA-CHECKPOINT-3.17
Ensure Accept ICMP Requests is not enabled
Descripción
The 'Accept ICMP requests' is a global property setting which is used to allow the ICMP requests from any location. ICMP is used to send control messages (for example, ping, destination unreachable, source quench, route change) to other systems. These rules are considered as rule zero which are executed before any user-defined rules.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify Accept Accept ICMP Requests under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Verify Accept Accept ICMP Requests is unchecked.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Go to the following path and Configured the Accept Accept ICMP Requests. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept Accept ICMP Requests
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- checkpointhardening
- Referencia
- CIS Check Point Firewall Benchmark v1.1.0 - 3.17 Ensure Accept ICMP Requests is not enabled