SA Magazine had an acticle about using JASS (Sun's Security Toolkit) and Titan (Opensource extensible hardening scripts) to
secure a Solaris system.
The links for Titan are now broken, as someone has turned 'fish.com' into, well, a forum about fish. But you can find Titan at their
commercial support site as a free download. Make sure you understand what each does. They can disable services your system actually needs to function as a web/app/db/NFS server.
Cheers,
Keith