TMA-INTUNE-MACOS-2.6.2.1
Ensure "Enable Stealth Mode" is set to "True"
Descrição
Stealth Mode prevents the system from responding to probing requests such as ICMP ping, effectively making the system appear invisible to network scanning. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
macOS: Intune admin center: Expand the Networking heading; Under the Firewall subheading; Verify that Enable Stealth Mode is present and set to True. On the device: Double-click com.apple.security.firewall Profile; Under the Details section; Confirm Stealth mode is set to Enabled
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Intune admin center: Select Networking then Firewall; Check Enable Stealth Mode; On the left side of the page set Enable Stealth Mode to True; Verify that Enable Stealth Mode is present and set to True
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- intune-macosintunemanual-review
- Referência
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.2.1 Ensure "Enable Stealth Mode" is set to "True"