The system must employ a local firewall.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227980	GEN008520	SV-227980r603266_rule		Medium

Description
A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-30142r490378_chk )
Determine the zone that you are currently securing. # zonename If the command output is "global", only the "phys" and "SR-IOV" interfaces assigned to the global zone require inspection. If using a non-Global zone, all "phys" and "SR-IOV" interfaces assigned to the zone require inspection. Determine if the system is using a local firewall. # svcs network/ipfilter If the service is not online, this is a finding.

Check Text ( C-30142r490378_chk )

Determine the zone that you are currently securing.

# zonename

If the command output is "global", only the "phys" and "SR-IOV" interfaces assigned to the global zone require inspection. If using a non-Global zone, all "phys" and "SR-IOV" interfaces assigned to the zone require inspection.

Determine if the system is using a local firewall.
# svcs network/ipfilter
If the service is not online, this is a finding.

Fix Text (F-30130r490379_fix)
Enable the system's local firewall. # svcadm enable network/ipfilter