Firewall Behaviour Pattern

[vegullas514]

Hi Mates,

I have a customer asking :
1. Behavior pattern of CP, if it receives too many packets from same source for SYNC ACK.
2. Is there any module\settings or configuration which does this kind of inspection in checkpoint?
3. If such behavior is not carried out by CP, is there any means where we can cross check above query.
Please advise!

[PhoneBoy]

Your question needs a lot more content to give a precise answer, but it sounds like the kind of stuff that’s generally checked for as part of the Inspection Settings in the firewall.

[Bob_Zimmerman]

Would also be worth looking at SYN Defender and connection quotas, which I think are both under IPS currently.