Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

peymansarayeli — Fri, 09 Jul 2021 12:50:05 GMT

Hi guys, I hope you are doing well.

Our infrastructure is now being audited by a third-party company. We have 6 FTDs in our infrastructure and they examined only one of them with a "Slowloris" or "Slow Http" vulnerability and not the other ones.

All of the FTDs are operating on 6.6.1 version.

I have searched a lot and could not find a single document or a post in this case.

Could you please help me find a document which shows that this version is not vulnerable in this regard?

Best,

Peyman

Re: Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

balaji.bandi — Fri, 09 Jul 2021 13:13:32 GMT

Not sure - we need full report or look at 6.7 fixes some bugs :

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu54706 (not sure i am guess you effecting with this i guess here)

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/resolved_issues.html

topic Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY in Network Security

Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

Re: Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY