Check: 3.095
Windows 2003 DC STIG:
3.095
(in version v6 r40)
Title
The system is configured to redirect ICMP. (Cat III impact)
Discussion
When disabled, forces ICMP to be routed via shortest path first.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes” to “Disabled”.
Additional Identifiers
Rule ID: SV-29362r1_rule
Vulnerability ID: V-4111
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
Implement the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |