Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

getting alert in WCS- DoS: CTS flood

Hi  Experts ,

I have WCS 7.0.172.0 where as i have very frequent alert about DoS : CTS flood

In channel 60, the system has detected 212 CTS frames in the last minute, which matches the traffic pattern of the form of denial-of-service attack, CTS (Clear-To-Send) attack. A wireless denial-of-service attacker may suspend the wireless media for communication by taking advantage of the privilege of CTS frame to reserve RF medium for transmission. By transmitting back to back CTS frames, an attacker can force other wireless devices sharing the RF medium to hold back its transmission until the attacker stops transmitting the CTS frames.
The system detects the abuse of CTS frames for denial-of-service attack.

I dont know , how can stop getting this alert.

Please suggest me for the same.

2 REPLIES

getting alert in WCS- DoS: CTS flood

If you go security-->wireless protection policy-->standard signature

You will see a list of signatures. Your CTS alert is in one of them, which one is the question. Is my guess ... Unless you have custom one set up ?

__________________________________________________________________________________________ "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin ___________________________________________________________
New Member

getting alert in WCS- DoS: CTS flood

Hi George,

Thanks for your reply. my question is , how to stop/ resolve getting this alert in WCS.

We are getting this alert because of the problem/issue , how to resove this ...

847
Views
0
Helpful
2
Replies
CreatePlease to create content