Ensure Accept ICMP Requests is not enabled

SedangLevel 2Tinjauan manualcheckpoint

Deskripsi

The 'Accept ICMP requests' is a global property setting which is used to allow the ICMP requests from any location. ICMP is used to send control messages (for example, ping, destination unreachable, source quench, route change) to other systems. These rules are considered as rule zero which are executed before any user-defined rules.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Verify Accept Accept ICMP Requests under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Verify Accept Accept ICMP Requests is unchecked.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Go to the following path and Configured the Accept Accept ICMP Requests. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept Accept ICMP Requests

Properti

Sistem operasi: Apa saja
Tag: checkpointhardening
Referensi: CIS Check Point Firewall Benchmark v1.1.0 - 3.17 Ensure Accept ICMP Requests is not enabled