09-11-2011 11:01 PM
Heloo Gyus,
we have a problem with cisco iron port web security device its uder LAND attack and the source and destination of the attack is its own ip address is these any good suggestion for the metigation of this attack..
Thanxxx
Sher
09-12-2011 05:26 PM
I can't speak to whether the ip stack in AsyncOS is susceptible to LAND attack, but there are resources on the net about LAND attacks and how to filter them out (drop packets where destination = source, as long as they aren't arp/gratuitous arp)
Once the firewall or router is blocking whereever this came from, you should be able to bounce the WSA to get it to quit responding to itself...
03-08-2013 11:34 AM
Sher,
I also have recently discovered we have this problem with our S370. Did you find a resolution?
Thanks,
Chris
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: