SYN attack protection + time-based reaction

From: Serge (serge.ciscostudy@gmail.com)
Date: Wed Feb 18 2009 - 05:15:30 ARST


Hi Experts,

Is there any technology for SYN attack protection, which not only must
protect from attack, but also after some amount of time (for example, 2min)
will terminate also legitimate established connections to the protected
server?

It looks like that CBAC and TCP Intercept are the only such kinds of
technology in IOS and both are not providing time-based reaction (expect for
one-minute limits).
Please correct me if I wrong.

Any help is appreciated.

-
Best regards, Serge

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:44:11 ARST