The system must employ a local firewall.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22582	GEN008520	SV-26974r3_rule		Medium

Description
A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

STIG	Date
Solaris 10 x86 Security Technical Implementation Guide	2018-06-29

Details

Check Text ( C-27921r3_chk )
Determine the zone that you are currently securing. # zonename If the command output is "global", only the "phys" and "SR-IOV" interfaces assigned to the global zone require inspection. If using a non-Global zone, all "phys" and "SR-IOV" interfaces assigned to the zone require inspection. Determine if the system is using a local firewall. # svcs network/ipfilter If the service is not online, this is a finding.

Check Text ( C-27921r3_chk )

Determine the zone that you are currently securing.

# zonename

If the command output is "global", only the "phys" and "SR-IOV" interfaces assigned to the global zone require inspection. If using a non-Global zone, all "phys" and "SR-IOV" interfaces assigned to the zone require inspection.

Determine if the system is using a local firewall.
# svcs network/ipfilter
If the service is not online, this is a finding.

Fix Text (F-24236r1_fix)
Enable the system's local firewall. # svcadm enable network/ipfilter