Ensure Accept ICMP Requests is not enabled

СредњаНиво 2Ручни прегледcheckpoint

Опис

The 'Accept ICMP requests' is a global property setting which is used to allow the ICMP requests from any location. ICMP is used to send control messages (for example, ping, destination unreachable, source quench, route change) to other systems. These rules are considered as rule zero which are executed before any user-defined rules.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Verify Accept Accept ICMP Requests under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Verify Accept Accept ICMP Requests is unchecked.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Go to the following path and Configured the Accept Accept ICMP Requests. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept Accept ICMP Requests

Својства

Оперативни системи: Било који
Ознаке: checkpointhardening
Референца: CIS Check Point Firewall Benchmark v1.1.0 - 3.17 Ensure Accept ICMP Requests is not enabled