3.6 Disable Response to ICMP Timestamp Requests - persistent ip = 0

Information

This setting controls whether Solaris will respond to ICMP timestamp requests.

Reduce attack surface by restricting this vector used for host discovery.

Solution

To enforce this setting, use the command:
# ipadm set-prop -p _respond_to_timestamp=0 ip

See Also

https://workbench.cisecurity.org/files/611

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CSCv6|9.2

Plugin: Unix

Control ID: 5f90d7d263fb76b433282597f807a6a4e2c28f60f5709d570f490f2827c54365