STIGQter: STIG Summary: SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE Version: 1 Release: 9 Benchmark Date: 23 Oct 2015: The system must not send IPv4 ICMP redirects.

DISA Rule

SV-26632r1_rule

Vulnerability Number

V-22417

Group Title

GEN003610

Rule Version

GEN003610

Severity

CAT II

CCI(s)

• CCI-001551 - The organization defines approved authorizations for controlling the flow of information between interconnected systems.

Weight

10

Fix Recommendation

Configure the system to not send IPv4 ICMP redirect messages.

Procedure:
# ndd -set /dev/ip ip_send_redirects 0

Also add this command to a system startup script.

Check Contents

Verify the system does not send IPv4 ICMP redirect messages.

Procedure:
# ndd /dev/ip ip_send_redirects

If the result is not 0, this is a finding.

Vulnerability Number

V-22417

Documentable

False

Rule Version

GEN003610

Severity Override Guidance

Verify the system does not send IPv4 ICMP redirect messages.

Procedure:
# ndd /dev/ip ip_send_redirects

If the result is not 0, this is a finding.

Check Content Reference

M

Responsibility

System Administrator

Target Key

22

Comments