How can Secure By Default Networking protect my system from network-based attacks?
During installation, customers can now set the default behavior for network services to run in a much more secure manner. Many non-essential network services are disabled and many more are set to listen for network connections only from the local system (“localhost”), thus reducing the exposure to attack. Users can still access their graphical interface, use Web browsers or Email clients and other services. Solaris Secure Shell remains available for secure remote administrative access to the system.
