TMA-INTUNE-MACOS-2.6.2.1
Ensure "Enable Stealth Mode" is set to "True"
설명
Stealth Mode prevents the system from responding to probing requests such as ICMP ping, effectively making the system appear invisible to network scanning. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
macOS: Intune admin center: Expand the Networking heading; Under the Firewall subheading; Verify that Enable Stealth Mode is present and set to True. On the device: Double-click com.apple.security.firewall Profile; Under the Details section; Confirm Stealth mode is set to Enabled
조치 방법
조치 방식: 가이드 또는 인프라 패치
Intune admin center: Select Networking then Firewall; Check Enable Stealth Mode; On the left side of the page set Enable Stealth Mode to True; Verify that Enable Stealth Mode is present and set to True
속성
- 운영 체제
- 모두
- 태그
- intune-macosintunemanual-review
- 참고 자료
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.2.1 Ensure "Enable Stealth Mode" is set to "True"