Ensure Drop Out of State ICMP Packets is enabled

中等級 2人工審核checkpoint

說明

This drops the out of state ICMP packets.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Go to the following path and verify Drop Out of State ICMP Packets and Log on Drop is enabled. SmartConsole > Global Properties > Stateful Inspection Verify Drop Out of State ICMP Packets and Log on Drop is checked.

修補方式

修補方法: 操作指南或基礎設施修補檔

Go to the following path and checked the Drop Out of State ICMP Packets and Log on Drop. SmartConsole > Global Properties > Stateful Inspection Checked the Drop Out of State ICMP Packets and Log on Drop

屬性

作業系統: 不限
標籤: checkpointhardening
參考資料: CIS Check Point Firewall Benchmark v1.1.0 - 3.11 Ensure Drop Out of State ICMP Packets is enabled