Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Configuration of Jolt2 Fragment Reassembly DoS attack

We use CSIDS ver2.5(3).

Can be changed "Allowable Value" parameter of Jolt2 on ver2.5? and if it can't, what is dafault value?

I understand ver3.0 possible.

Regards.

1 REPLY
New Member

Re: Configuration of Jolt2 Fragment Reassembly DoS attack

Not much in 2.5 appliance code was modifiable. As to Jolt2, it is a pretty high value that triggers the signature. I was told that Jolt2 is not currently in an engine in 3.0 (it's still a hard-coded signature as it is fairly unique) which means it still will not have any configurable options. Does anyone know what the default triggers actually are?

136
Views
0
Helpful
1
Replies