Detections
Analytics

1.127 SOL-11.1-050120

Information

The system must set maximum number of incoming connections to 1024.

GROUP ID: V-216142RULE ID: SV-216142r959010

This setting controls the maximum number of incoming connections that can be accepted on a TCP port limiting exposure to denial of service attacks.

Solution

The Network Management profile is required.

Configure maximum number of incoming connections.

pfexec ipadm set-prop -p _conn_req_max_q=1024 tcp

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216142r959010_rule, STIG-ID|SOL-11.1-050120, Vuln-ID|V-216142

Plugin: Unix

Control ID: d75d3ba57d17b8bf2120259f3b25d0880d19d5bdc9c2a17db0f702959215131a