Solaris 11 X86 Security Technical Implementation Guide

The Solaris 11 X86 Security Technical Implementation Guide (V3 R7) has 214 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

214STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Wed Sep 30 2026

The system must set maximum number of incoming connections to 1024.

Solaris 11 X86 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must set maximum number of incoming connections to 1024.

Description

Discussion Text

This setting controls the maximum number of incoming connections that can be accepted on a TCP port limiting exposure to denial of service attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-216142

Rule

SV-216142r959010_rule

Severity

low

Rule Version

SOL-11.1-050120

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the maximum number of incoming connections is set to 1024.

# ipadm show-prop -p _conn_req_max_q -co current tcp

If the value returned is smaller than "1024", this is a finding. 

In environments where connection numbers are high, such as a busy web server, this value may need to be increased.

Implementation Procedure

Fix Text

The Network Management profile is required.

Configure maximum number of incoming connections.

# pfexec ipadm set-prop -p _conn_req_max_q=1024 tcp

STIG check 111 of 214 in the Solaris 11 X86 STIG checklist

← Previous · V-216141The system must set maximum number of half-open TCP connections to 4096.Next · V-216143 →The system must disable network routing unless required.