Hello All,
As a background, we have done a Vulnerability Assessment (VA) scanning on our Dataminer server and post assessment, there are few vulnerabilities that need to be addressed and one of it is ICMP Timestamp Request Remote Date Disclosure
Therefore, I would like to get your advise if I can filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14) in order to address the above vulnerability?
Is there any impact on our current Dataminer timing if I filter out ICMP (13) and (14)?
Appreciate your advise and feedback on this matter.
Snapshot as attached for your perusal.
Syarah Husna [DevOps Advocate] Selected answer as best 17th September 2024
Hi,
As far as I'm aware, DataMiner does not rely on ICMP 13 and 14, as time synchronization across the cluster should be done by NTP.
Syarah Husna [DevOps Advocate] Edited comment 17th September 2024
Dear Seppe,
Thank you so much for the information! I have filter out the ICMP (13) and (14) accordingly to addressed our server vulnerabilities.