Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must set maximum number of incoming connections to 1024.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-216142 | SOL-11.1-050120 | SV-216142r505929_rule | Low |
| Description |
|---|
| This setting controls the maximum number of incoming connections that can be accepted on a TCP port limiting exposure to denial of service attacks. |
| STIG | Date |
|---|---|
| Solaris 11 X86 Security Technical Implementation Guide | 2020-09-03 |
Details
| Check Text ( C-17380r372808_chk ) |
|---|
| Determine if the maximum number of incoming connections is set to 1024. # ipadm show-prop -p _conn_req_max_q -co current tcp If the value returned is smaller than "1024", this is a finding. In environments where connection numbers are high, such as a busy web server, this value may need to be increased. |
| Fix Text (F-17378r372809_fix) |
|---|
| The Network Management profile is required. Configure maximum number of incoming connections. # pfexec ipadm set-prop -p _conn_req_max_q=1024 tcp |