Types of attacks should block

Rishi.WWN — Wed, 17 Aug 2022 06:25:18 GMT

Hi Team,

Could you please help me to know, which types of attacks should we block on firewall. One example is ddos attack.

Re: Types of attacks should block

Leo Laohoo — Wed, 17 Aug 2022 06:42:47 GMT

Read each IOC carefully and block accordingly.

Re: Types of attacks should block

Marius Gunnerud — Wed, 17 Aug 2022 07:05:32 GMT

That is a very VERY general question. The answer would depend on what you are exposing to the internet, what type of devices are on your network (MAC, Windows, Linux, switches, firewalls, Wireless, Servers, other VMs, etc.).

I suppose the most common attacks are DDoS, Ransom Ware, and Phishing as these are quite easy to execute.

Ransom Ware and Phishing are best mitigated by holding security best practice courses for all your employees so they dont click on links in emails thinking they have won a lottery that they never actually entered.

DDoS can be a little more difficult to mitigate as there are a few different attacks types here. But for the most part these can be stopped using IPS and / or a strict firewall configuration policy.

You should also consider subscribing to news feed from the likes of Talos and NIST (there are a lot of others that slip my mind at this moment.)

topic Types of attacks should block in Network Security

Types of attacks should block

Re: Types of attacks should block

Re: Types of attacks should block