Ensure "Enable Stealth Mode" is set to "True"

SrednjaNivo 1Ručni pregledintune-macos

Opis

Stealth Mode prevents the system from responding to probing requests such as ICMP ping, effectively making the system appear invisible to network scanning. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

macOS: Intune admin center: Expand the Networking heading; Under the Firewall subheading; Verify that Enable Stealth Mode is present and set to True. On the device: Double-click com.apple.security.firewall Profile; Under the Details section; Confirm Stealth mode is set to Enabled

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Intune admin center: Select Networking then Firewall; Check Enable Stealth Mode; On the left side of the page set Enable Stealth Mode to True; Verify that Enable Stealth Mode is present and set to True

Svojstva

Operativni sistemi: Bilo koji
Oznake: intune-macosintunemanual-review
Referenca: CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.2.1 Ensure "Enable Stealth Mode" is set to "True"