IPS Protection - TCP Windows Size Enforcement

[parfuar]

Hi,

I have been validating some IPS signatures and found this (TCP Windows Size Enforcement) and found it interesting. Where I want to apply is an external FW, where all the traffic comes from outside the infrastructure. Being the virtualized firewall is afraid that it will impact upon activation. They think it will have a lot of impact when activating this in the IPS.

Thanks

[PhoneBoy]

Sorry, I'm not understanding the question.
But if you're concerned about the impact, first enable the protection in Detect mode and see how much it logs, then you can tune it.

[parfuar]

In my case I have a firewall that protects the sites / services of my company. I read that activating this protection could have an impact on IPS. This is a critical firewall, I'm afraid the service will break. Hence the question before activating protection.