Security mechanisms to avoid bandwith flood.

[Mark3000]

Hello,

I am looking for more information about mechanisms and tips to avoid :

- Flood Attacks (GET HTTP, PING, SYN..)

- DoS attacks

- Worms

What I am looking for is to implement such mechanisms on the routers (2600, 1700) before accessing the servers otherweise the bandwith from the CPE to the aggregation router is flooded.

Thanks in advance.

[mostiguy]

there are some things you can do to prevent syn floods, but if someone else has more bandwidth than you, there is nothing you can do to stop most floods.

[Mark3000]

Hello,

Could you explain me how to prevent syn attacks on Cisco IOS please ?*

Regards

[spitz]

You can implement the IDS mechanism on the outside interface, i dont know how to do it in the CLI but in the PDM you can just create an IDS policy for Attack and implement it on the outside interface...its all in the PDM GUI...