SOL-11.1-050050 - The system must not respond to broadcast ICMP echo requests.

Information

ICMP echo requests can be useful for reconnaissance of systems and for denial of service attacks.

Solution

The Network Management profile is required.

Disable respond to echo broadcast.

# pfexec ipadm set-prop -p _respond_to_echo_broadcast=0 ip

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R6_STIG.zip

Item Details

Audit Name: DISA Solaris 11 SPARC STIG v3r6

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216372r959010_rule, STIG-ID|SOL-11.1-050050, STIG-Legacy|SV-61053, STIG-Legacy|V-48181, Vuln-ID|V-216372

Plugin: Unix

Control ID: d1cad6044b12be55ad178d5636646f2407da8618b6695e2f30bbf372e5a658bc