ASA best practice - protect web server from syn attack

[esa_fresa]

What is best practice to protect our dmz web server from syn attacks? We have basic threat detection enabled but my understanding is that this just gives statistics and doesn't take any action.

We have ASA version 9.1 with FirePower services

[Aditya Ganjoo · Accepted solution]

Hi,

Please check this good link which describes different ways to mitigate attacks on ASA:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/100830-asa-pix-netattacks.html

Regards,

Aditya

Please rate helpful posts and mark correct answers.