Solaris 10 SPARC Security Technical Implementation Guide

The Solaris 10 SPARC Security Technical Implementation Guide (V2 R4) has 507 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

507STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R4

CurrentPublished Thu Jan 26 2023

If the system is an anonymous FTP server, it must be isolated to the DMZ network.

Solaris 10 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

If the system is an anonymous FTP server, it must be isolated to the DMZ network.

Description

Discussion Text

Anonymous FTP is a public data service which is only permitted in a server capacity when located on the DMZ network.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226947

Rule

SV-226947r603265_rule

Severity

medium

Rule Version

GEN004840

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Use the command ftp to connect the system's FTP service. Attempt to log into this host with a user name of anonymous and a password of guest (also try the password of guest@mail.com). If the logon is not successful, this check is not applicable.

Ask the SA if the system is located on a DMZ network. If the system is not located on a DMZ network, this is a finding.

Implementation Procedure

Fix Text

Move the system to a DMZ network.

STIG check 372 of 507 in the Solaris 10 SPARC STIG checklist

← Previous · V-226946Anonymous FTP must not be active on the system unless authorized.Next · V-226948 →The ftpusers file must exist.