Title

The system is configured to redirect ICMP. (Cat III impact)

Discussion

When disabled, forces ICMP to be routed via shortest path first.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes” to “Disabled”.

Additional Identifiers

Rule ID: SV-25066r1_rule

Vulnerability ID: V-4111

Group Title: Disable ICMP Redirect

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.