IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

AIX must not respond to ICMPv6 echo requests sent to a broadcast address.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

AIX must not respond to ICMPv6 echo requests sent to a broadcast address.

Description

Discussion Text

Responding to broadcast ICMP echo requests facilitates network mapping and provides a vector for amplification attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215430

Rule

SV-215430r1268251_rule

Severity

medium

Rule Version

AIX7-00-003135

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, run the following command:
# /usr/sbin/no -o bcastping 
bcastping = 0

If the value returned is not "0", this is a finding.

Implementation Procedure

Fix Text

Configure the system to not respond to IPv6 multicast ICMP ECHO_REQUESTs by running:
# /usr/sbin/no -p -o bcastping=0

STIG check 256 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215429AIX must not process ICMP timestamp requests.Next · V-215431 →AIX must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.