If the system is a firewall, ASET must be used on the system, and the firewall parameters must be set in /usr/aset/asetenv.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4309	GEN000000-SOL00160	SV-4309r2_rule	ECSC-1	Medium

Description
ASET will not perform firewall tasks if it is not listed as a parameter in /usr/aset/asetenv.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-8289r2_chk )
Perform the following to determine if ASET is being used. # crontab -l |grep aset A returned entry would indicate ASET is being utilized. Determine if ASET is configured to check firewall settings. # grep TASKS /usr/aset/asetenv | grep firewall If an entry is not returned, this is a finding.

Fix Text (F-4220r2_fix)
If the system is used as a firewall and ASET is used, ensure the firewall parameter is configured in /usr/aset/asetenv.