dropping half-open TCP connection

[giridar]

Hi All,

 Our security team is recommending to configure the WLC to drop half-open TCP connections

I have 5520 with 8.5.151.0

I couldn't find much information on the internet

please advise

[marce1000]

              - I don't think that AireOS has any native support for that,

 M.

[giridar]

thank you, do we have to use any other managing tools

[balaji.bandi]

You also need to ask the Security team who performed this task, what is their recommendations to fix that - if you working on the networking side - you need to consider using FW - which can fixup and make security tighten for your network.

google how to perform security hardening cisco devices and learn the best practice, implement one at a time, and see if that fix the security audit.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180416-tsa18-106a

[giridar]

thank you