Ensure Accept ICMP Requests is not enabled

中等級 2人工審核checkpoint

說明

The 'Accept ICMP requests' is a global property setting which is used to allow the ICMP requests from any location. ICMP is used to send control messages (for example, ping, destination unreachable, source quench, route change) to other systems. These rules are considered as rule zero which are executed before any user-defined rules.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Verify Accept Accept ICMP Requests under Global Properties is not enabled. SmartConsole > Gateways & Servers > select each Gateway > Firewall Verify Accept Accept ICMP Requests is unchecked.

修補方式

修補方法: 操作指南或基礎設施修補檔

Go to the following path and Configured the Accept Accept ICMP Requests. SmartConsole > Gateways & Servers > select each Gateway > Firewall Unchecked the Accept Accept ICMP Requests

屬性

作業系統: 不限
標籤: checkpointhardening
參考資料: CIS Check Point Firewall Benchmark v1.1.0 - 3.17 Ensure Accept ICMP Requests is not enabled