03-23-2026 01:52 AM
I would like to ask whether DoS Protection detection can be configured in TAP mode.
Since this is TAP mode, I understand that traffic cannot be controlled or blocked. However, what I want is simply to detect whether there are any internal DoS attacks.
I have confirmed that TAP mode is included under Zone Protection. However, it is still not clear whether DoS Protection detection itself is supported on a TAP interface.
If anyone has experience with this or has tested it before, I would greatly appreciate your guidance.
Thanks in advance
03-23-2026 02:27 AM
a TAP interface discards all traffic it receives (listening only) so you are correct in your understanding that things like SYNcookies will not work on a TAP interface. you can attach a zpp to the tap zone and it will alert you of anything it detects
TL;DR you can't send SYN cookies, or block IP addresses etc, but alerts will function as expected
03-23-2026 02:27 AM
a TAP interface discards all traffic it receives (listening only) so you are correct in your understanding that things like SYNcookies will not work on a TAP interface. you can attach a zpp to the tap zone and it will alert you of anything it detects
TL;DR you can't send SYN cookies, or block IP addresses etc, but alerts will function as expected
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
