VMS Vulnerability Alert 5520 ver 9.1(5)

[wilsonbolanos]

Scan:FTP

Endpoint: *.*.*.* (Public ip)

Vulnerability: TCP timestamp response

Severity: 1

Certainty: Confirmed

DESCRIPTION

  The remote host responded with a TCP timestamp.  The TCP timestamp response

  can be used to approximate the remote host's uptime, potentially aiding in

  further attacks.  Additionally, some operating systems can be fingerprinted

  based on the behavior of their TCP timestamps.

How do we disable TCP Timestamps on this version on the ASA?

[Vibhor Amrodia]

Hi,

You can use TCP normalizer for this:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/asdm64/configuration_guide/asdm_64_config/conns_connlimits.html#wp1091018

Thanks and Regards,

Vibhor Amrodia