Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The IPS must block malicious Internet Control Message Protocol (ICMP) packets by properly configuring ICMP signatures and rules.
Description
Discussion Text
ICMP messages are used to provide feedback about problems in the network. These messages are sent back to the sender to support diagnostics; however, some messages can also provide host information, network topology, and a covert channel that may be exploited by an attacker.
Given the prevalence of ICMP traffic on the network, monitoring for malicious ICMP traffic would be cumbersome. Vendors provide signatures and rules which filter for known ICMP traffic exploits.
Given the prevalence of ICMP traffic on the network, monitoring for malicious ICMP traffic would be cumbersome. Vendors provide signatures and rules which filter for known ICMP traffic exploits.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.