Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Screen option SYN-FLOOD.

$
0
0

Hi Dawid,

THANKS A LOT for take your time answering my question.  Smiley Wink

 

I understood that the SYN Flood protection is used to protect the NETWORK against DOS attacks and the SYN-ACK-ACK protect the firewall self (and as consequence protect the network against DOS).

 

So, lets imagine that a syn flood will be initiate, the SRX should intercept the SYN's and will respond the SYN's in behalf of the server, right? So, i can suppose that the syn shouldn't never reach the server due the tcp-proxy-feature, right? So, why i use the syn-flood screen option althought the fact that the syn-ack-ack can be enough?

 

The TCP-Proxy feature is enabled by default? Or not?

 

Tks,

João Victor


Viewing all articles
Browse latest Browse all 17645


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>