various ways to harden your Solaris 11 OS
I stumbled upon a document, CIS_Solaris_11_Benchmark_v1.0.0.pdf, which provides some very good informaiton on how to make settings for some of the items required; however, there are some holes in it.
Can anyone tell me if the OS can enable TCP Syncookies?
I have run accross a google post that states Solaris 10 doesn't require it. This is handled by the OS in a different way so there is no way to enable/disable it.
The STIG requirement states: "The system must be configured to use TCP syncookies when experiencing a TCP SYN flood."