topic Re: Implied Rules -SERVICE ICMP-PROTO in General Topics

Implied Rules -SERVICE ICMP-PROTO

FabioLima1 — Fri, 17 Feb 2023 17:45:01 GMT

Good afternoon everybody.

I need some guidance thank you in advance, in Algosec tool a risk is presented where the image below is presented. Would you have any alternative to guide me?

Re: Implied Rules -SERVICE ICMP-PROTO

PhoneBoy — Fri, 17 Feb 2023 21:50:16 GMT

There isn't enough details in this screenshot to know precisely where it is flagging this "risk" in the Check Point configuration.
It could be this Global Property setting (which is off on my system):

If this isn't it, then you will need to ask Algosec precisely why they are flagging this.

Re: Implied Rules -SERVICE ICMP-PROTO

FabioLima1 — Wed, 22 Feb 2023 12:42:31 GMT

Good morning everybody.
Below is a print of the global settings.

Re: Implied Rules -SERVICE ICMP-PROTO

Chris_Atkinson — Wed, 22 Feb 2023 13:53:42 GMT

"Accept ICMP requests" is selected / enabled.

Disabling this and creating specific rules will likely resolve the algosec alert.

Re: Implied Rules -SERVICE ICMP-PROTO

FabioLima1 — Fri, 24 Feb 2023 00:04:43 GMT

Hey, guys.
I need some help, I'm going to disable the icmp request option in global properties and I'm going to put this rule at the top.

Will it work?