Can you disable ICMP Timestamp Requests like Replies in the registry?

Question

I am aware of using the EnableICMPTimestampRep value=0 to block icmp timestamp replies, but is there an option to stop requests such as EnableICMPTimestampReq? I am aware of the firewall settings, this is strictly for registry editing purposes for defense-in-depth principles.

Answer 1

Hello,

Unfortunately, there is no universally recognized equivalent registry setting like "EnableICMPTimestampReq" in Windows versions. Control over ICMP settings is typically managed through firewall rules rather than editing the registry directly. For a complete defense-in-depth strategy, registry adjustments must be combined with firewall settings and possibly Group Policy settings. To verify and enforce these settings, you can use Windows Firewall with Advanced Security to create inbound rules to block ICMPv4/ICMPv6 echo requests as well as timestamp and other specific ICMP types. If you manage multiple computers, use Group Policy Objects (GPOs) to enforce these settings consistently across your network.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.