[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] FloodGate good for DOS type attack?
Hi Raymond, No... FloodGate is software-based bandwidth management tools that can integrate with yr FW-1. Yes you can assign little bandwidth for the worm, however, it does not block the worm and it's not intended to use as blocking worm... you should consider to use 1. SmartDefense (subscription is needed) 2. Forescout (Activescout) it's an IPS. hope this helps, Nick. [FW-1] FloodGate good for DOS type attack? Forum: SecurePoint - CheckPoint FireWall-1 Archive Date: Sep 25, 13:53 From: Raymond N <[email protected]> I don't have any experience on FloodGate at all. But learn some info about this product in trade show. Just wondering if you think FloodGate is a good tool to prevent (for example) massive of icmp-ping from one side of the firewall to the other side of the network? I mean those icmp-ping may or may not target to the firewall interface directly, but to the machines in the other side of the network. Couple months ago, we experienced huge amount of ping from worm-infected machines in one network to the other side of the network, and the amount of traffic cause the firewall not able to handle other type of traffic. Thanks for your input. -raymond __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|