cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1272
Views
0
Helpful
1
Replies

Http Flood Attack

Shaiz
Level 1
Level 1

Dear reader/s,

                      I have been asked to investigate the attached. This seems like a http flood attack to me. Please correct me if i am wrong. I have enabled http inspect on the ASA under default global_policy. Can you please suggest what else should i do in order to prevent happening again? 

Many thanks

 

 

           

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

192.168.200.73 - this looks like local IP address. investigate what is this device and why it generating http flood request on port 80 ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Review Cisco Networking for a $25 gift card