Is your e3000 Environment Secure? Homestead security

page 57April 24, 2003
Is Your Homestead Secure? - Solution Symposium West
Filter outbound ICMP timestamp & netmask
replies
• MPE responds to ICMP timestamp & netmask requests
• A hacker who knows your local time could schedule
attacks during the graveyard shift
• A hacker who knows your netmask is learning about
your network topology
• Use an external firewall or other network device to filter
these outbound ICMP replies from your e3000