Ensure Accept ICMP Requests is not enabled

보통레벨 2수동 검토checkpoint

설명

The 'Accept ICMP requests' is a global property setting which is used to allow the ICMP requests from any location. ICMP is used to send control messages (for example, ping, destination unreachable, source quench, route change) to other systems. These rules are considered as rule zero which are executed before any user-defined rules.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify Accept Accept ICMP Requests under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Verify Accept Accept ICMP Requests is unchecked.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Go to the following path and Configured the Accept Accept ICMP Requests. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept Accept ICMP Requests

속성

운영 체제: 모두
태그: checkpointhardening
참고 자료: CIS Check Point Firewall Benchmark v1.1.0 - 3.17 Ensure Accept ICMP Requests is not enabled