Using ASA 5510 as transperant firewall against DOS attacks.

[vlad.crown]

Hi folks,

I've been trying to configure an ASA 5510 as a transperant firewall (not a hop) which will have no firewall rules except to detect and block DOS attacks. Running image 8.2 and right now am back to a blank config with nothing but the management interface configured and firewall in transperant mode. There is another firewall right behind it which will do all the ruling for heavy traffic.

Any ideas would be appreciated.

[Maykol Rojas]

Hello,

You can always use TCP intercept feature on the ASA to stop DoS attacks.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html

Mike