Ensure DCCP is disabled

Information

If the protocol is not required, it is recommended that the drivers not be installed to reduce the potential attack surface.

Solution

Edit or create the file /etc/modprobe.d/CIS.conf and add the following line: install dccp /bin/true

See Also

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623.html