Paulo Rosa

SCADA TCP Sessions and Visibility

Discussion created by Paulo Rosa on Jul 13, 2018
Latest reply on Jul 15, 2018 by Pablo Barriga

Hi,

 

Does Checkpoint 1200R , in monitor mode, as the ability to classifiy the traffic using "application control" even when it not sees the begining of session (SYN Packet). 

 

What is the beahavior for Long Duration SCADA TCP sessions ?  Does it Application control still works ? Should I see the comenads sent in the session ? When it appears ? when session closes or during the estabished session ?

 

Thanks

Outcomes