Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
FabioLima1
Contributor

Implied Rules -SERVICE ICMP-PROTO

 
 
 

 

Good afternoon everybody.

I need some guidance thank you in advance, in Algosec tool a risk is presented where the image below is presented. Would you have any alternative to guide me?

ICMP-PROTO.png

0 Kudos
4 Replies
PhoneBoy
Admin
Admin

There isn't enough details in this screenshot to know precisely where it is flagging this "risk" in the Check Point configuration.
It could be this Global Property setting (which is off on my system):

image.png

If this isn't it, then you will need to ask Algosec precisely why they are flagging this.

(1)
FabioLima1
Contributor

ICMP-PROTO1.png

Good morning everybody.
Below is a print of the global settings.

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

"Accept ICMP requests" is selected / enabled.

Disabling this and creating specific rules will likely resolve the algosec alert.

CCSM R77/R80/ELITE
FabioLima1
Contributor

Hey, guys.
I need some help, I'm going to disable the icmp request option in global properties and I'm going to put this rule at the top.

Will it work?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events