Detections
Analytics
3.095 - The system is configured to redirect ICMP.
Information
When disabled, forces ICMP to be routed via shortest path first.Solution
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'MSS- (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' to 'Disabled'.See Also
http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip
Item Details
Audit Name: DISA Windows Vista STIG v6r41
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-29363r1_rule, STIG-ID|3.095, Vuln-ID|V-4111
Plugin: Windows
Control ID: df734bd989c775b81bbac353567b3f2d8dca7c145e274a6cab9c7d07c0ea7034