topic Re: Zone protection isnt blocking scan in General Topics

Zone protection isnt blocking scan

soporteseguridad — Mon, 16 Dec 2013 17:03:42 GMT

We have created a zone protection profile for zones UNTRUST/DMZ/TRUST to prevent scan but we have realised that this zone protection profile isnt working.

Why isnt blocking this scan??? we have the default values in the zone protection profiles....

I attach a screenshot about the scan

Thanks

Re: Zone protection isnt blocking scan

hyadavalli — Mon, 16 Dec 2013 17:41:05 GMT

Hello,

Please make sure your zone protection looks like below and port scan will be blocked if threshold is met in the interval specified.

Regards,

Hari Yadavalli

Re: Zone protection isnt blocking scan

soporteseguridad — Mon, 16 Dec 2013 18:01:19 GMT

Yes it configured like that. But the attach was to a range of our publics ips only in 2 ports (80 and 443), it wasnt a portscan it was a scan in our public range.... zone protection should have recognise this like attack?? there is any way to prevent a scan in our public range ?

Re: Zone protection isnt blocking scan

hyadavalli — Mon, 16 Dec 2013 18:08:36 GMT

In that case you can implement DoS protection.