Detections
Analytics

1.120 SOL-11.1-050050

Information

The system must not respond to broadcast ICMP echo requests.

GROUP ID: V-216135RULE ID: SV-216135r959010

ICMP echo requests can be useful for reconnaissance of systems and for denial of service attacks.

Solution

The Network Management profile is required.

Disable respond to echo broadcast.

pfexec ipadm set-prop -p _respond_to_echo_broadcast=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216135r959010_rule, STIG-ID|SOL-11.1-050050, Vuln-ID|V-216135

Plugin: Unix

Control ID: 00b9ca734cb6080993fd6332c1f2a55f971d116920a9319e22ca715490967bc3