Skip to main content

Disable TCP Timestamps

(2022-01-08)

Problem

Some security scanner is complaining that TCP Timestamps are enabled on my ASA.

Solution

access-list ACL_TCP extended permit tcp any any
!
class-map timestamp_class_map
 match access-list ACL_TCP
!
tcp-map timestamp_tcp_map
  tcp-options timestamp clear
!
policy-map global_policy
 class timestamp_class_map
  set connection advanced-options timestamp_tcp_map
!
end
wr me