Skip to content

The router must be configured to have Internet Control Message Protocol (ICMP) redirects disabled on all external interfaces.

An XCCDF Rule

Description

The ICMP supports IP traffic by relaying information about paths, routes, and network conditions. Routers automatically send ICMP messages under a wide variety of conditions. Redirect ICMP messages are commonly used by attackers for network mapping and diagnosis.

ID
SV-207155r856639_rule
Version
SRG-NET-000362-RTR-000115
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Disable ICMP redirects on all external interfaces.