topic Re: 11618 - TCP/IP SYN+FIN Packet Filtering Weakness resolution in GlobalProtect Discussions

11618 - TCP/IP SYN+FIN Packet Filtering Weakness resolution

isentric89 — Tue, 15 Feb 2022 23:26:42 GMT

VA scan flag out the below for GP Portal URL

11618 - TCP/IP SYN+FIN Packet Filtering Weakness
-
Synopsis
It may be possible to bypass firewall rules.

Description
The remote host does not discard TCP SYN packets that have the FIN flag set.

Depending on the kind of firewall you are using, an attacker may use this flaw to bypass its rules.

Please advise how to resolved this issue.

Re: 11618 - TCP/IP SYN+FIN Packet Filtering Weakness resolution

Pablo_Parreno — Thu, 28 Apr 2022 15:58:27 GMT

I have the same alert, can you tell me if the alert could be resolved?

Re: 11618 - TCP/IP SYN+FIN Packet Filtering Weakness resolution

thoffman — Wed, 09 Nov 2022 16:33:57 GMT

Is there any update to this? We are seeing this in our scans also.

Thank you,

Tom