Is DoS Protection Detection Possible in TAP Mode?

CHOE-KyungJun — Mon, 23 Mar 2026 08:52:23 GMT

I would like to ask whether DoS Protection detection can be configured in TAP mode.

Since this is TAP mode, I understand that traffic cannot be controlled or blocked. However, what I want is simply to detect whether there are any internal DoS attacks.

I have confirmed that TAP mode is included under Zone Protection. However, it is still not clear whether DoS Protection detection itself is supported on a TAP interface.

If anyone has experience with this or has tested it before, I would greatly appreciate your guidance.

Thanks in advance

Re: Is DoS Protection Detection Possible in TAP Mode?

reaper — Mon, 23 Mar 2026 09:27:21 GMT

Hi @CHOE-KyungJun

a TAP interface discards all traffic it receives (listening only) so you are correct in your understanding that things like SYNcookies will not work on a TAP interface. you can attach a zpp to the tap zone and it will alert you of anything it detects

TL;DR you can't send SYN cookies, or block IP addresses etc, but alerts will function as expected

topic Re: Is DoS Protection Detection Possible in TAP Mode? in General Topics

Is DoS Protection Detection Possible in TAP Mode?

Re: Is DoS Protection Detection Possible in TAP Mode?