STIGQter STIGQter: STIG Summary: IBM z/VM Using CA VM:Secure Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Apr 2018:

The IBM z/VM TCP/IP PENDINGCONNECTIONLIMIT statement must be properly configured.

DISA Rule

SV-93607r1_rule

Vulnerability Number

V-78901

Group Title

SRG-OS-000142-GPOS-00071

Rule Version

IBMZ-VM-000740

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the “PENDINGCONNECTIONLIMIT” statement with a value that is less than the “TCBPOOLSIZE”.

Check Contents

Examine the “TCP/IP” configuration file.

If there is no “PENDINGCONNECTIONLIMIT” statement, this is a finding.

Vulnerability Number

V-78901

Documentable

False

Rule Version

IBMZ-VM-000740

Severity Override Guidance

Examine the “TCP/IP” configuration file.

If there is no “PENDINGCONNECTIONLIMIT” statement, this is a finding.

Check Content Reference

M

Target Key

3211

Comments