Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

[peymansarayeli]

Hi guys, I hope you are doing well.

Our infrastructure is now being audited by a third-party company. We have 6 FTDs in our infrastructure and they examined only one of them with a "Slowloris" or "Slow Http" vulnerability and not the other ones.

All of the FTDs are operating on 6.6.1 version.

I have searched a lot and could not find a single document or a post in this case.

Could you please help me find a document which shows that this version is not vulnerable in this regard?

Best,

Peyman

[balaji.bandi]

Not sure - we need full report or look at 6.7 fixes some bugs :

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu54706    (not sure i am guess you effecting with this i guess here)

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/resolved_issues.html