TMA-INTUNE-MACOS-2.6.2.1
Ensure "Enable Stealth Mode" is set to "True"
Açıklama
Stealth Mode prevents the system from responding to probing requests such as ICMP ping, effectively making the system appear invisible to network scanning. The benchmark marks this a Manual check of an Intune macOS policy setting that cannot be read from the endpoint with a script, so TMAegis lists it as a manual review item with the audit steps (the policy must be inspected in the Intune admin center or on the managed device).
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
macOS: Intune admin center: Expand the Networking heading; Under the Firewall subheading; Verify that Enable Stealth Mode is present and set to True. On the device: Double-click com.apple.security.firewall Profile; Under the Details section; Confirm Stealth mode is set to Enabled
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Intune admin center: Select Networking then Firewall; Check Enable Stealth Mode; On the left side of the page set Enable Stealth Mode to True; Verify that Enable Stealth Mode is present and set to True
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- intune-macosintunemanual-review
- Referans
- CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 - 2.6.2.1 Ensure "Enable Stealth Mode" is set to "True"