ICMP Timestamp Request Remote Date Disclosure Details - The remote host answers to an ICMP timestamp request.

yes, you can create a firewall rule for this one with the following settings:

• Source: Any
• Destination: Your protected network
• Protocol: ICMP
• Destination Port: Leave blank (ICMP doesn't use ports)
• Action: Deny
• Name: Something descriptive like "Block ICMP Timestamps"

Click on the newly created rule. In the protocol settings:

• ICMP Type: Select "Custom"
• ICMP Code: Enter "13, 14" (this blocks both requests and replies)

Let me try and get back to you

I have also the same problem.

Description: Nessus Vulnerability Information:

CVE-1999-0524 Name :ICMP Timestamp Request Remote Date Disclosure

Synopsis: It is possible to determine the exact time set on the remote host.

Descriptions: The remote host answers to an ICMP timestamp request. This allows an

attacker to know the date that is set on the targeted machine, which

may assist an unauthenticated, remote attacker in defeating time-based

authentication protocols.

Solution: "Filter out the ICMP timestamp requests (13), and the outgoing ICMP

timestamp replies (14)."

Please help here!

Thanks

Narendra

Narender sharma ,

From the lab tests, we could see a response from the Private IP of the Firewall.

Can you share the results of PINGing the Azure Firewall from a VM in the same VNET?

Cheers,

Kapil

Hi Kapil,

Thanks for supporting.

We have window server2019 VM on premises base machine hyper VM and using the Fortinet Firewall not the Azure Firewall .

Thanks

Narendra,