Cisco iron port web security LAND attack

[szamin125]

Heloo Gyus,

we have a problem with cisco iron port web security device its uder LAND attack and the source and destination of the attack is its own ip address is these any good suggestion for the metigation of this attack..

Thanxxx

Sher

[Ken Stieers]

I can't speak to whether the ip stack in AsyncOS is susceptible to LAND attack, but there are resources on the net about LAND attacks and how to filter them out (drop packets where destination = source, as long as they aren't arp/gratuitous arp)

Once the firewall or router is blocking whereever this came from, you should be able to bounce the WSA to get it to quit responding to itself...

[Chris Gillham]

Sher, 

  I also have recently discovered we have this problem with our S370.  Did you find a resolution?

Thanks,

   Chris