SPARC Legacy servers (MOSC)

MOSC Banner

various ways to harden your Solaris 11 OS

edited Jan 30, 2013 9:52PM in SPARC Legacy servers (MOSC) 8 commentsAnswered ✓
Hello, I have the joyus task of applying DISA STIGS to my Solaris 11 servers.

I stumbled upon a document, CIS_Solaris_11_Benchmark_v1.0.0.pdf, which provides some very good informaiton on how to make settings for some of the items required; however, there are some holes in it.

Can anyone tell me if the OS can enable  TCP Syncookies?

I have run accross a google post that states Solaris 10 doesn't require it. This is handled by the OS in a different way so there is no way to enable/disable it.

The STIG requirement states: "The system must be configured to use TCP syncookies when experiencing a TCP SYN flood."

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center