Scribd Logo
Upload

Welcome to Scribd!

  • Check Point - Best Practices - DDoS Attacks On Security Gateways

    Uploaded by

    Forense Orlando
    124 views11 pages
    The document discusses firewall configuration settings for mitigating denial of service attacks. It recommends increasing the psl_max_stream_segments setting from the default of 16386 to 32772 to allow more concurrent connections. It also recommends increasing the psl_max_strip_window setting from 8390108 to 16780216 to allow larger response windows and protect against denial of service attacks. Configuring these settings higher than the defaults helps strengthen the firewall against denial of service attacks.

    Original Description:

    Original Title

    Check Point - Best Practices - DDoS attacks on security gateways

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses firewall configuration settings for mitigating denial of service attacks. It recommends increasing the psl_max_stream_segments setting from the default of 16386 to 32772 to allow more concurrent connections. It also recommends increasing the psl_max_strip_window setting from 8390108 to 16780216 to allow larger response windows and protect against denial of service attacks. Configuring these settings higher than the defaults helps strengthen the firewall against denial of service attacks.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    124 views11 pages

    Check Point - Best Practices - DDoS Attacks On Security Gateways

    Uploaded by

    Forense Orlando
    The document discusses firewall configuration settings for mitigating denial of service attacks. It recommends increasing the psl_max_stream_segments setting from the default of 16386 to 32772 to allow more concurrent connections. It also recommends increasing the psl_max_strip_window setting from 8390108 to 16780216 to allow larger response windows and protect against denial of service attacks. Configuring these settings higher than the defaults helps strengthen the firewall against denial of service attacks.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 11

    ◦

    ◦
    ◦

    ◦
    ◦
    ◦

    ◾
    VANISH

    ◾
    VANISH

    ◦
    ◦
    ◦

    ◦
    ◦
    ◦

    ◦
    ◦
    ◾

    ◾
    Denial of service
    Default Protection Recommended_Protection

    ◾
    ◾

    ◦
    ◦

    ◦
    ◦

    ◦
    ◦

    Any

    psl_max_stream_segments = 16386
    [Expert@HostName:0]# fw ctl set int psl_max_stream_segments 32772

    psl_max_strip_window = 8390108

    [Expert@HostName:0]# fw ctl set int psl_max_strip_window 16780216

    ◦
    ◦
    ◦

    Enter your comment here

    You might also like