Solaris 11 SPARC Security Technical Implementation Guide

The Solaris 11 SPARC Security Technical Implementation Guide (V3 R7) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must set maximum number of half-open TCP connections to 4096.

Solaris 11 SPARC Security Technical Implementation Guide

Assessment Title

Rule Text

The system must set maximum number of half-open TCP connections to 4096.

Description

Discussion Text

This setting controls how many half-open connections can exist for a TCP port.

It is necessary to control the number of completed connections to the system to provide some protection against denial of service attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216378

Rule

SV-216378r959010_rule

Severity

medium

Rule Version

SOL-11.1-050110

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the number of half open TCP connections is set to 4096.

# ipadm show-prop -p _conn_req_max_q0 -co current tcp

If the value of "4096" is not returned, this is a finding.

Implementation Procedure

Fix Text

The Network Management profile is required

Configure maximum TCP connections for IPv4 and IPv6.

# pfexec ipadm set-prop -p _conn_req_max_q0=4096 tcp

STIG check 111 of 215 in the Solaris 11 SPARC STIG checklist

← Previous · V-216377The system must disable TCP reverse IP source routing.Next · V-216379 →The system must set maximum number of incoming connections to 1024.