800-53|SC-7(16)

Title

PREVENT DISCOVERY OF COMPONENTS / DEVICES

Description

The information system prevents discovery of specific system components composing a managed interface.

Supplemental

This control enhancement protects network addresses of information system components that are part of managed interfaces from discovery through common tools and techniques used to identify devices on networks. Network addresses are not available for discovery (e.g., network address not published or entered in domain name systems), requiring prior knowledge for access. Another obfuscation technique is to periodically change network addresses.

Reference Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Parent Title: BOUNDARY PROTECTION

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundEchoRequest'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundEchoRequest'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundMaskRequest'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundMaskRequest'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundRouterRequest'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundRouterRequest'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundTimestampRequest'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowInboundTimestampRequest'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundDestinationUnreachable'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundDestinationUnreachable'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundPacketTooBig'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundPacketTooBig'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundParameterProblem'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundParameterProblem'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundSourceQuench'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundSourceQuench'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundTimeExceeded'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowOutboundTimeExceeded'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowRedirect'WindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.1.1 Configure 'Windows Firewall: Allow ICMP exceptions - AllowRedirect'WindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundEchoRequestWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundEchoRequestWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundMaskRequestWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundMaskRequestWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundRouterRequestWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundRouterRequestWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundTimestampRequestWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowInboundTimestampRequestWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundDestinationUnreachableWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundDestinationUnreachableWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundPacketTooBigWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundPacketTooBigWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundParameterProblemWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundParameterProblemWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundSourceQuenchWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundSourceQuenchWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundTimeExceededWindowsCIS Windows 2003 DC v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowOutboundTimeExceededWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowRedirectWindowsCIS Windows 2003 MS v3.1.0
1.2.1.1.1.2.7 Configure 'Windows Firewall: Allow ICMP exceptions' - AllowRedirectWindowsCIS Windows 2003 DC v3.1.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundEchoRequest)WindowsCIS Windows 2008 SSLF v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundEchoRequest)WindowsCIS Windows 2008 Enterprise v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundMaskRequest)WindowsCIS Windows 2008 SSLF v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundMaskRequest)WindowsCIS Windows 2008 Enterprise v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundRouterRequest)WindowsCIS Windows 2008 Enterprise v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundRouterRequest)WindowsCIS Windows 2008 SSLF v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundTimestampRequest)WindowsCIS Windows 2008 SSLF v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowInboundTimestampRequest)WindowsCIS Windows 2008 Enterprise v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowOutboundDestinationUnreachable)WindowsCIS Windows 2008 Enterprise v1.2.0
1.5.1 Windows Firewall: Allow ICMP exceptions (Domain) (AllowOutboundDestinationUnreachable)WindowsCIS Windows 2008 SSLF v1.2.0