An error occurred:

Solaris 11 X86 STIG

Solaris 11 X86 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
SOL-11.1-050060 V-216136 The system must not respond to multicast echo requests. Cat III
SOL-11.1-050070 V-216137 The system must ignore ICMP redirect messages. Cat III
SOL-11.1-050080 V-216138 The system must set strict multihoming. Cat II
SOL-11.1-050090 V-216139 The system must disable ICMP redirect messages. Cat III
SOL-11.1-050100 V-216140 The system must disable TCP reverse IP source routing. Cat III
SOL-11.1-050110 V-216141 The system must set maximum number of half-open TCP connections to 4096. Cat II
SOL-11.1-050120 V-216142 The system must set maximum number of incoming connections to 1024. Cat III
SOL-11.1-050130 V-216143 The system must disable network routing unless required. Cat II
SOL-11.1-050140 V-216144 The system must implement TCP Wrappers. Cat III
SOL-11.1-050240 V-216150 The boundary protection system (firewall) must be configured to deny network traffic by default and must allow network traffic by exception (i.e., deny all, permit by exception). Cat II
SOL-11.1-050370 V-216157 The system must prevent local applications from generating source-routed packets. Cat III
SOL-11.1-050380 V-216158 The operating system must display the DoD approved system use notification message or banner before granting access to the system for general system logons. Cat III
SOL-11.1-050390 V-216159 The operating system must display the DoD approved system use notification message or banner for SSH connections. Cat III
SOL-11.1-050410 V-216160 The GNOME service must display the DoD approved system use notification message or banner before granting access to the system. Cat III
SOL-11.1-050430 V-216161 The FTP service must display the DoD approved system use notification message or banner before granting access to the system. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.