← Back to Solaris 11 SPARC Security Technical Implementation Guide

V-216378

CAT II (Medium)

The system must set maximum number of half-open TCP connections to 4096.

Rule ID

SV-216378r959010_rule

STIG

Solaris 11 SPARC Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-000366

Discussion

This setting controls how many half-open connections can exist for a TCP port. It is necessary to control the number of completed connections to the system to provide some protection against denial of service attacks.

Check Content

Determine if the number of half open TCP connections is set to 4096.

# ipadm show-prop -p _conn_req_max_q0 -co current tcp

If the value of "4096" is not returned, this is a finding.

Fix Text

The Network Management profile is required

Configure maximum TCP connections for IPv4 and IPv6.

# pfexec ipadm set-prop -p _conn_req_max_q0=4096 tcp