An error occurred:

Solaris 11 SPARC STIG

Solaris 11 SPARC Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-050040 V-216371 The system must not respond to ICMP broadcast netmask requests. Cat III
SOL-11.1-050050 V-216372 The system must not respond to broadcast ICMP echo requests. Cat II
SOL-11.1-050060 V-216373 The system must not respond to multicast echo requests. Cat III
SOL-11.1-050070 V-216374 The system must ignore ICMP redirect messages. Cat III
SOL-11.1-050080 V-216375 The system must set strict multihoming. Cat II
SOL-11.1-050090 V-216376 The system must disable ICMP redirect messages. Cat III
SOL-11.1-050100 V-216377 The system must disable TCP reverse IP source routing. Cat III
SOL-11.1-050110 V-216378 The system must set maximum number of half-open TCP connections to 4096. Cat II
SOL-11.1-050120 V-216379 The system must set maximum number of incoming connections to 1024. Cat III
SOL-11.1-050130 V-216380 The system must disable network routing unless required. Cat II
SOL-11.1-050140 V-216381 The system must implement TCP Wrappers. Cat III
SOL-11.1-050240 V-216387 The boundary protection system (firewall) must be configured to deny network traffic by default and must allow network traffic by exception (i.e., deny all, permit by exception). Cat II
SOL-11.1-050370 V-216394 The system must prevent local applications from generating source-routed packets. Cat III
SOL-11.1-050380 V-216395 The operating system must display the DoD approved system use notification message or banner before granting access to the system for general system logons. Cat III
SOL-11.1-050390 V-216396 The operating system must display the DoD approved system use notification message or banner for SSH connections. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.