Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
You don't need IPS, it is much easier to use NBAR on your outside router (or any router between the source host and the Internet connection). NBAR can match specifically on p2p connections and can either be dropped completely or rate-limited.A sample...
Hi, my understanding is that the FragGuard feature - if enabled - always does virtual reassembly of fragmented IP packets, regardless of the MTU settings. This feature is used to protect against attacks that are using fragmented packets, and not to f...
Hi you need to provide some more information, attach a sanitized configuration and the output from debug crypto isakmp and debug crypto ipsec when the tunnel is not coming up.
