3.1 Disable Response to Broadcast ICMPv4 Echo Request

Information

This setting controls whether Solaris responds to broadcast ICMPv4 echo requests.

Rationale:

Reduce attack surface by restricting this vector used for host discovery and to prevent denial of service attacks.

Solution

To enforce this setting, run the following command:

# ipadm set-prop -p _respond_to_echo_broadcast=0 ip

See Also

https://workbench.cisecurity.org/benchmarks/4777

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: a68ee6d80c3698ea97ac5f77e7d66171ba449f1a4cc17aaa721f8baf4ccd5390