query on timestamp

Question

Our vulnerability scanner tool has detected the following vulnerability on windows servers: ICMP Timestamp Request Remote Date Disclosure. It provides the following solution: Filter out the ICMP timestamp requests (13) and the outgoing ICMP timestamp replies (14). please guide me on how to fix this.

Answer 1

Hello,

Here are some steps you can try:

Firewall Configuration:

Configure your firewall to block incoming and outgoing ICMP packets with types 13 and 14. This is often the simplest and most effective method.

Windows Server Configuration:

You can use the Windows Firewall with Advanced Security to create rules that block these specific ICMP types.

Open the Windows Firewall with Advanced Security.

Create a new inbound rule and select “Custom” for the rule type.

In the Protocol and Ports section, select ICMPv4 as the protocol type and specify the ICMP types 13 and 14.

Repeat the process for outbound rules.

Best Regards,

Hania Lian

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.