The system must not respond to ICMPv4 echoes sent to a broadcast address.
Responding to broadcast Internet Control Message Protocol (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.
Configure the system to ignore ICMP ECHO_REQUESTs sent to broadcast addresses. # no -po bcastping=0
# /usr/sbin/no -o bcastping If the value returned is not 0, this is a finding.