STIGQter: STIG Summary: Solaris 11 SPARC Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The operating system must protect the integrity of transmitted information.

DISA Rule

SV-219976r603267_rule

Vulnerability Number

V-219976

Group Title

SRG-OS-000423

Rule Version

SOL-11.1-060070

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

All remote sessions must be conducted via SSH and IPsec. Ensure that SSH and IPsec are the only protocols used.

Check Contents

All remote sessions must be conducted via encrypted services and ports.

Ask the operator to document all configured external ports and protocols. If any unencrypted connections are used, this is a finding.

Vulnerability Number

V-219976

Documentable

False

Rule Version

SOL-11.1-060070

Severity Override Guidance

All remote sessions must be conducted via encrypted services and ports.

Ask the operator to document all configured external ports and protocols. If any unencrypted connections are used, this is a finding.

Check Content Reference

M

Target Key

4022

Comments