SYN flood ASA

michelerossi — Mon, 11 Mar 2019 11:45:54 GMT

Hi,

Could I Disabled the "SYN flood" control in the ASA version 8.03 ?

The IDS Module is disbled.

Is it posssible ?

Thanks

Re: SYN flood ASA

ebreniz — Wed, 16 Jan 2008 19:45:06 GMT

Yes you can Disabled the "SYN flood. It is the normalizer that detects the Syn Flood and, and can do syn cookies for protection of the Syn Flood. But as the ASA does the normalization, the normalizer is not running on the AIP-SSM and will not detect the Syn Flood on the AIP-SSM. So you need to rely on the ASA's Syn Flood protection (the ASA itself does Syn Cookies).

If this were an Appliance then the Appliance does run the Normalizer and is able to detect the Syn Flood and use Syn Cookies for protection (to turn on the Syn Cookie protection configure modify-packet-inline on sig 3050).

Re: SYN flood ASA

michelerossi — Fri, 18 Jan 2008 08:03:16 GMT

Have you got an example config of the Asa to do This ?

Thanks.

topic SYN flood ASA in Network Security

SYN flood ASA

Re: SYN flood ASA

Re: SYN flood ASA