EDR: Is IP Forwarding safe to disable?
Article ID: 287135
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Is IP Forwarding safe to disable in the Linux Server?
Environment
- EDR (Formerly CB Response) Server: All Supported Versions
Resolution
- IP forwarding is disabled by default in the EDR instance.
- If IP Forwarding is disabled, there should be no impact to the EDR Server.
Additional Information
- To verify the status of IP Forwarding, navigate to /etc/sysctl.conf and check the following line
# Controls IP packet forwarding net.ipv4.ip_forward = 0
Feedback
Yes
No
Powered by
