topic Check Point Setting TCP SYN in Firewall and Security Management

Check Point Setting TCP SYN

RainSky — Tue, 11 Oct 2022 08:54:47 GMT

Hello

In the R80.40, have any method or policy can setting tcp syn packet max-length ?

ex:

If a remote hosts send tcp syn packet length over the 100 fromt port 80, then deny it.

This is a global setting or source hosts can be specified ?

Thank you.

Re: Check Point Setting TCP SYN

PhoneBoy — Thu, 13 Oct 2022 19:58:16 GMT

There is no "easy" method in SmartConsole to do this.
You can try creating a service of type other with the following in the match field: tcp, dport=80, packetlen <= 100
However, I do not know if this will work.
It might be possible through modifying .def files to achieve this result, but it's not exactly obvious how and such changes are likely unsupported.