topic Re: dropping half-open TCP connection in Wireless

dropping half-open TCP connection

giridar — Mon, 05 Jul 2021 20:21:27 GMT

Hi All,

Our security team is recommending to configure the WLC to drop half-open TCP connections

I have 5520 with 8.5.151.0

I couldn't find much information on the internet

please advise

Re: dropping half-open TCP connection

Mark Elsen — Wed, 10 Mar 2021 08:03:17 GMT

- I don't think that AireOS has any native support for that,

Re: dropping half-open TCP connection

giridar — Wed, 10 Mar 2021 09:03:16 GMT

thank you, do we have to use any other managing tools

Re: dropping half-open TCP connection

balaji.bandi — Wed, 10 Mar 2021 09:16:21 GMT

You also need to ask the Security team who performed this task, what is their recommendations to fix that - if you working on the networking side - you need to consider using FW - which can fixup and make security tighten for your network.

google how to perform security hardening cisco devices and learn the best practice, implement one at a time, and see if that fix the security audit.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180416-tsa18-106a

Re: dropping half-open TCP connection

giridar — Wed, 10 Mar 2021 10:34:42 GMT

thank you