About s_quasar

‎06-04-2020

since

L3 Networker

59
Posts
1
Like
2
Solutions
Jun 04, 2020
Last Visited

User Activity

User Profile

Latest posts by s_quasar

Subject

Views

Posted

Re: Block traceroute

4447

‎11-14-2019 07:30 AM

Re: Block traceroute

4532

‎11-13-2019 09:00 AM

Re: TCP / UDP Flood

4170

‎11-12-2019 02:21 PM

TCP / UDP Flood

4206

‎11-12-2019 08:40 AM

Block traceroute

4611

‎11-12-2019 08:35 AM

My Liked Posts

Subject

Likes

Posted

Re: SSL application undefined in monitor

1 Like

‎05-30-2017 01:38 AM

User Badges

Community Statistics

Member Since	‎11-15-2016 06:31 AM
Date Last Visited	‎06-04-2020 09:42 AM
Posts	59
Total Likes Received	1

I want to consider that if an IP make traceroute, this is the first step to do other bad activities on my infrastructure so I want to block it (and not deny) before it can attempt to infiltrate in my network.

Hi, no, I want to block IP not deny like in reconnaissance in zone protection or in vulnerability protection that you can create a custom rule with 3600 seconds block IP.

I supposed this. Maybe I can see specific IP attacker and victim because before I activeted a classified rule (now is aggregate). See the IPs is very useful because I can check in other websites if it is a bad or good IP. Maybe I can use an aggregate rule as a test and than activete again a classified rule.

Hi all, I have set up a dos rule from outside to my server zone. Why sometimes I can see attacker and victim IP and sometimes not?

Hi all, is there a way to block IP source if I match traceroute App-ID? Maybe with a custom vulnerability?

Likes From

User

Likes Count

1