Remediation Steps

Follow the steps below to remediate this finding on Windows.

1. Block ICMP timestamp requests using Windows Firewall.

2. Open Windows Firewall with Advanced Security.

3. Create a new Inbound Rule:

   • Rule Type: Custom
   • Protocol and Ports: ICMPv4, Specific types: Timestamp Request
   • Action: Block the connection

4. Alternatively, via PowerShell:

   New-NetFirewallRule -DisplayName "Block ICMP Timestamp" -Protocol ICMPv4 -IcmpType 13 -Direction Inbound -Action Block