cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
190
Views
0
Helpful
1
Replies

How to Fix ICMP timestamp response Vulnerability in cisco IOS

Team,

Currently we do not have an ACl on our outside interface. If apply the following ACL will it only block the deny ICMP statements?

Extended IP access list DENY_ICMP
10 deny icmp any any timestamp-request
20 deny icmp any any timestamp-reply
30 permit icmp any any
40 permit ip any any

 

1 Reply 1

marce1000
VIP
VIP

 

  - Looks like correct ; you may  verify this for instance with hping3 as in :
                   #  hping3 target-ip-address   --icmp --icmp-ts -V

   In general for security and or vulnerability issues , use latest advisory software version on the device and check the vulnerability again , 

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '
Review Cisco Networking for a $25 gift card