RULE(RULE ID:1005158)

Rule General Information
Release Date: 2024-12-24
Rule Name: ICMP Tunnel Detection
Severity:
CVE ID:
Rule Protection Details
Description: ICMP tunnel is a technology that uses ICMP protocol to realize data covert transmission. By embedding data in ICMP echo requests and responses, attackers can bypass network firewalls to communicate and transfer data over a restricted network. This rule is used to detect the ICMP tunnel communication behavior.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.