Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must not respond to ICMP broadcast netmask requests.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The system must not respond to ICMP broadcast netmask requests.

Description

Discussion Text

By determining the netmasks of various computers in your network, an attacker can better map your subnet structure and infer trust relationships.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216371

Rule

SV-216371r959010_rule

Severity

low

Rule Version

SOL-11.1-050040

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the response to address mask broadcast is disabled.

# ipadm show-prop -p _respond_to_address_mask_broadcast -co current ip

If the output of this command is not "0", this is a finding.

Implementation Procedure

Fix Text

The Network Management profile is required.

Disable responses to address mask broadcast.

# pfexec ipadm set-prop -p _respond_to_address_mask_broadcast=0 ip

STIG check 104 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-216370The system must not respond to ICMP broadcast timestamp requests.Next · V-216372 →The system must not respond to broadcast ICMP echo requests.