STIGQter: STIG Summary: IBM zVM Using CA VM:Secure Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 27 Oct 2022:

The IBM z/VM TCP/IP FOREIGNIPCONLIMIT statement must be properly configured.

DISA Rule

SV-237925r858983_rule

Vulnerability Number

V-237925

Group Title

SRG-OS-000142-GPOS-00071

Rule Version

IBMZ-VM-000720

Severity

CAT II

CCI(s)

CCI-001095 - Manage capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial of service attacks.

Weight

Fix Recommendation

Configure the "FOREIGNIPCONLIMIT" statement with a value specifying the maximum number of connections that a foreign IP address is allowed to have open at the same time.

The System Administrator should determine the proper value.

Check Contents

Examine "TCP/IP" configuration file.

If there is no "FOREIGNIPCONLIMIT" statement, this is a finding.

If the "FOREIGNIPCONLIMIT" has a value of "0", this is a finding.

Vulnerability Number

V-237925

Documentable

False

Rule Version

IBMZ-VM-000720

Severity Override Guidance

Examine "TCP/IP" configuration file.

If there is no "FOREIGNIPCONLIMIT" statement, this is a finding.

If the "FOREIGNIPCONLIMIT" has a value of "0", this is a finding.

Check Content Reference

Target Key

5306