Detections
Analytics
PHTN-40-000224 - The Photon operating system must not respond to IPv4 Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.
Information
Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.Solution
Navigate to and open:/etc/sysctl.d/zz-stig-hardening.conf
Add or update the following line:
net.ipv4.icmp_echo_ignore_broadcasts = 1
At the command line, run the following command to load the new configuration:
# /sbin/sysctl --load /etc/sysctl.d/zz-stig-hardening.conf
Note: If the file zz-stig-hardening.conf does not exist, it must be created.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y24M08_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258887r991589_rule, STIG-ID|PHTN-40-000224, Vuln-ID|V-258887
Plugin: Unix
Control ID: 73e11c0577919263e9e6dec385248717d890efc36fdecf9089e1defa2f7799e9