InformationAllows ICMP traffic for specific hosts or subnets and denies ICMP traffic for all other sources
ICMP is an important troubleshooting tool that can also be used to perform ICMP attacks on untrusted interfaces. For these interfaces, the ICMP traffic should be allowed only for specific hosts or subnets that are trusted by the Enterprise and should be denied for all other sources.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
SolutionConfigure ICMP using Firepower Management Center:
Step 1 - Select Devices > Platform Settings and create or edit a FTD policy
Step 2 - Select ICMP.