| Publisher | Cisco Systems | ||
|---|---|---|---|
| Format | 175.3KB PDF | Date added | 01 Oct 2006 |
| Topics | Firewalls, Denial of Service, Security Tools | ||
| Downloads | 0 | ||
Prior to Cisco IOS Software Release 12.4(11)T, Cisco IOS Firewall provided Denial-of-Service (DoS) attack protection as a default when either Classic or Zone-Based Policy Firewall was applied. Cisco IOS Software Release 12.4(11)T modified the default DoS settings so protection is effectively disabled, but the connection activity counters are still active. This paper provides procedures to tune Cisco IOS Firewall DoS protection values for both Classic and Zone-Based Cisco IOS Firewall. Cisco IOS Firewall maintains counters of the number of "Half-open" TCP connections, as well as the total connection rate through the firewall and intrusion prevention software, in both Classic Firewall (ip inspect) and Zone-Based Policy Firewall.
Related white papers
Take a holistic approach to business-driven security.
Coprate leaders face multiple challenges including the need to address complience measures and protection against external and internal threats. This white paper introduces actions that organisations can take to drive...
Intel? Centrino? 2 with vPro? Technology and Intel? Core?2 Processor with vPro? Technology
Best for Business: Security and Manageability on the Chip. The latest notebook and desktop PCs with Intel? vPro? technology build on proven capabilities to enable greater proactive security, enhanced maintenance,...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Understanding Web application security challenges
Business has grown increasingly independent upon web applications and they are becoming more difficult to secure. This paper explains what you can do to protect your organization and improve Web...
Messagelabs - IT Security Threats of Today and Tommorrow Webcast Supporting Doc
This document supports th silicon.com webcast which discusses some of the security threats to IT systems that organisations have to face on a daily basis - and what do about...
Intel Active Management Technology
This webcast demonstrates the latest in Intel Active Management Technology and network security. Intel Active Management Technology helps protect the network, making it easier to keep software and virus protection...
University of California, Merced Builds Secure and Assured Juniper Networks Solution From the Ground Up
The University of California, Merced (UC Merced) is the first University of California campus to be built since 1965. In planning the University's network infrastructure, the network engineer was faced...





