How to Fix ICMP timestamp response Vulnerability in cisco IOS

[rtm1am@outlook.com]

Team,

Currently we do not have an ACl on our outside interface. If apply the following ACL will it only block the deny ICMP statements?

Extended IP access list DENY_ICMP
10 deny icmp any any timestamp-request
20 deny icmp any any timestamp-reply
30 permit icmp any any
40 permit ip any any

[Mark Elsen]

  - Looks like correct ; you may  verify this for instance with hping3 as in :
                   #  hping3 target-ip-address   --icmp --icmp-ts -V

   In general for security and or vulnerability issues , use latest advisory software version on the device and check the vulnerability again , 

 M.