Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not respond to broadcast ICMP echo requests.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216372 | SOL-11.1-050050 | SV-216372r505927_rule | Medium |
| Description |
|---|
| ICMP echo requests can be useful for reconnaissance of systems and for denial of service attacks. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2020-09-04 |
Details
| Check Text ( C-17608r371204_chk ) |
|---|
| Determine if ICMP echo requests response is disabled. # ipadm show-prop -p _respond_to_echo_broadcast -co current ip If the output of this command is not "0", this is a finding. |
| Fix Text (F-17606r371205_fix) |
|---|
| The Network Management profile is required. Disable respond to echo broadcast. # pfexec ipadm set-prop -p _respond_to_echo_broadcast=0 ip |