Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Paulo_Rosa
Participant

SCADA TCP Sessions and Visibility

Hi,

Does Checkpoint 1200R , in monitor mode, as the ability to classifiy the traffic using "application control" even when it not sees the begining of session (SYN Packet). 

What is the beahavior for Long Duration SCADA TCP sessions ?  Does it Application control still works ? Should I see the comenads sent in the session ? When it appears ? when session closes or during the estabished session ?

Thanks

2 Replies
Pablo_Barriga
Advisor

Hello , I have analyzed several companies with monitor mode, you can try to configure this parameters to see all the traffic.

0 Kudos
PhoneBoy
Admin
Admin

0 Kudos
Upcoming Events

    CheckMates Events