- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hi,
Does Checkpoint 1200R , in monitor mode, as the ability to classifiy the traffic using "application control" even when it not sees the begining of session (SYN Packet).
What is the beahavior for Long Duration SCADA TCP sessions ? Does it Application control still works ? Should I see the comenads sent in the session ? When it appears ? when session closes or during the estabished session ?
Thanks
Hello , I have analyzed several companies with monitor mode, you can try to configure this parameters to see all the traffic.
This may also be relevant: How to activate inspection on internal traffic on 600/700/1100/1200R/1400 appliances
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY