cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
parfuar
Ivory

IPS Protection - TCP Windows Size Enforcement

Hi,

I have been validating some IPS signatures and found this (TCP Windows Size Enforcement) and found it interesting. Where I want to apply is an external FW, where all the traffic comes from outside the infrastructure. Being the virtualized firewall is afraid that it will impact upon activation. They think it will have a lot of impact when activating this in the IPS.

 

Thanks

0 Kudos
2 Replies
Admin
Admin

Re: IPS Protection - TCP Windows Size Enforcement

Sorry, I'm not understanding the question.
But if you're concerned about the impact, first enable the protection in Detect mode and see how much it logs, then you can tune it.
0 Kudos
parfuar
Ivory

Re: IPS Protection - TCP Windows Size Enforcement

In my case I have a firewall that protects the sites / services of my company. I read that activating this protection could have an impact on IPS. This is a critical firewall, I'm afraid the service will break. Hence the question before activating protection.

0 Kudos