Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CSS DoS

Is DoS protection a built-in feature of CSS11500?

How to configure DoS and how to block intrusion from the output of show dos ?

Thanks,

tony

2 REPLIES
New Member

Re: CSS DoS

DoS is built in to the CSS, there is no configuration for it expect for snmp trap generation for DoS detection. CSS is not a firewall, its DoS detection is limited to obvious things, such as source and destination addresses being the same - land, smurf, half open syn, loopback or broadcast addresses, source address that the box owns etc.

New Member

Re: CSS DoS

I have found that false DoS error alerts are generated when my load balanced servers try to open connections to other servers that are down. The CSS sees a device sending SYN packets for connections that never open.

156
Views
0
Helpful
2
Replies
CreatePlease to create content