Detections
Analytics

SOL-11.1-050110 - The system must set maximum number of half-open TCP connections to 4096.

Information

This setting controls how many half-open connections can exist for a TCP port.

It is necessary to control the number of completed connections to the system to provide some protection against denial of service attacks.

Solution

The Network Management profile is required

Configure maximum TCP connections for IPv4 and IPv6.

# pfexec ipadm set-prop -p _conn_req_max_q0=4096 tcp

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216141r959010_rule, STIG-ID|SOL-11.1-050110, STIG-Legacy|SV-61079, STIG-Legacy|V-48207, Vuln-ID|V-216141

Plugin: Unix

Control ID: 99caf3498bbef03ac7d83a88bfb27352f80bc00b388fe4f931b65dcb4fdf3018