UCF STIG Viewer Logo

The system must not respond to broadcast ICMP echo requests.


Overview

Finding ID Version Rule ID IA Controls Severity
V-216372 SOL-11.1-050050 SV-216372r603267_rule Medium
Description
ICMP echo requests can be useful for reconnaissance of systems and for denial of service attacks.
STIG Date
Solaris 11 SPARC Security Technical Implementation Guide 2022-11-18

Details

Check Text ( C-17608r371204_chk )
Determine if ICMP echo requests response is disabled.

# ipadm show-prop -p _respond_to_echo_broadcast -co current ip

If the output of this command is not "0", this is a finding.
Fix Text (F-17606r371205_fix)
The Network Management profile is required.

Disable respond to echo broadcast.

# pfexec ipadm set-prop -p _respond_to_echo_broadcast=0 ip