UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Stealth Mode must be enabled on the firewall.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51327 OSX8-00-01245 SV-65537r1_rule Medium
Description
Stealth Mode must be enabled on the firewall.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53675r1_chk )
To check if the OSX firewall (not pf.conf) is running in stealth mode run the following command:

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --getstealthmode | awk '{ print $NF }'

If the result is "Disabled", this is a finding.
Fix Text (F-56127r1_fix)
To enable the firewall stealth mode, run the following command:

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on