UCF STIG Viewer Logo

The system must not process ICMP timestamp requests.


Overview

Finding ID Version Rule ID IA Controls Severity
GEN003602-ESXI5-PF GEN003602-ESXI5-PF GEN003602-ESXI5-PF_rule Low
Description
The processing of Internet Control Message Protocol (ICMP) timestamp requests increases the attack surface of the system. Applicable, but permanent finding - The hypervisor does not support this functionality (No ndd network tuning facility).
STIG Date
VMware ESXi v5 Security Technical Implementation Guide 2013-01-15

Details

Check Text ( C-GEN003602-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.
Fix Text (F-GEN003602-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.