This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 93%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
How to fix ("ICMP Timestamp Request Remote Date Disclosure") for Windows servers
Hi Jay Tee,
Firewall rules take effect immediately after creation/modification.
No system restart is required for Windows Firewall changes to apply.
I would like to add option 3
# Create firewall rule to block ICMP Timestamp requests
New-NetFirewallRule -DisplayName "Block ICMP Timestamp" -Direction Inbound -Protocol ICMPv4 -IcmpType 13 -Action Block -Enabled True
Best regards,
Alex
P.S. If my answer help to you, please Accept my answer
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hello Jay Tee,
Thank you for posting in Q&A forum.
To address the "ICMP Timestamp Request Remote Date Disclosure" issue on Windows Server 2019, you can follow these steps:
• Open the Registry Editor (regedit).
• Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters.
• Create a new DWORD value named DisableICMPRedirect and set its value to 1.
• Restart the server for the changes to take effect.
• Open the Windows Firewall with Advanced Security.
• Create a new inbound rule to block ICMPv4 and ICMPv6 Echo Request messages.
• Create a new outbound rule to block ICMPv4 and ICMPv6 Echo Reply messages.
I hope the information above is helpful.
If you have any questions or concerns, please feel free to let us know.
Best Regards,
Daisy Zhou
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
@Daisy Zhou If I go with option 2, do I still have to restart the server?
@Daisy Zhou If I go with option 2, do I still have to restart the server?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 99%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Both options are wrong.
Option 1
The register value DisableICMPRedirect is not relevant to the ICMP Timestamp Request issue.
Option 2
The ICMP Echo Request is type 8, but the Timestamp Request is type 13. The answer you provided just disables response to Ping requests, not the Timestamp request.
Actually, I searched and tested several claimed solutions by modifying the registry value, but all of them are incapable of disabling the ICMP timestamp response (ICMP type 14). Up to now, I have found the only workable solution is to turn on the Windows Firewall. It blocks all traffic except for that allowed in the firewall rules. By default, there are no rules to allow the ICMP timestamp request.