IP FORWARDING ENABLED for SmartConsole IP

[shiv_poch]

Hi,

VA scan result showing our Smartconsole IPs have IP forwarding enabled.

Reco is to:

On Linux, you can disable IP forwarding by doing :

echo 0 > /proc/sys/net/ipv4/ip_forward

Is this safe to be done for SmartConsole?

I read for 1 thread here that it wasn't recommended but i think pertaining to security gateway/firewall.

If detected for SmartConsole only, can we follow the reco above?

Running on R81, VM.

Thanks.

[Chris_Atkinson]

Please consult with TAC for the procedure for Management.

Note the above might not survive a reboot and deffinately isn't recommended for gateway machines.

[Bob_Zimmerman]

IPs don't have IP forwarding at all, so it can't be enabled or disabled. IP network stacks can have IP forwarding enabled, but that's not something a scanner would be able to detect. What exactly is the finding?