Solaris 11 X86 Security Technical Implementation Guide

The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

214STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must disable directed broadcast packet forwarding.

Solaris 11 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must disable directed broadcast packet forwarding.

Description

Discussion Text

This parameter must be disabled to reduce the risk of denial of service attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216131

Rule

SV-216131r959010_rule

Severity

low

Rule Version

SOL-11.1-050010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if directed broadcast packet forwarding is disabled.

# ipadm show-prop -p _forward_directed_broadcasts -co current ip

If the output of this command is not "0", this is a finding.

Implementation Procedure

Fix Text

The Network Management profile is required.

Disable directed broadcast packet forwarding.

# pfexec ipadm set-prop -p _forward_directed_broadcasts=0 ip

STIG check 100 of 214 in the Solaris 11 X86 STIG checklist

← Previous · V-216130The operating system must limit the number of concurrent sessions for each account to an organization-defined number of sessions.Next · V-216132 →The system must not respond to ICMP timestamp requests.