Detections
Analytics

1.129 SOL-11.1-050120

Information

The system must set maximum number of incoming connections to 1024.

GROUP ID: V-216379
RULE ID: SV-216379r959010

This setting controls the maximum number of incoming connections that can be accepted on a TCP port limiting exposure to denial of service attacks.

Solution

The Network Management profile is required.

Configure maximum number of incoming connections.

# pfexec ipadm set-prop -p _conn_req_max_q=1024 tcp

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216379r959010_rule, STIG-ID|SOL-11.1-050120, Vuln-ID|V-216379

Plugin: Unix

Control ID: cfac31e5a6809bdd030669545c10aca7eb5af4482d3a86e73584cf0dc5558be1