When configuring a Zone Protection profile, in which section (protection type) would an NGFW engineer configure options to protect against activities such as spoofed IP addresses and split handshake session establishment attempts?
The firewall can drop IP packets that contain specific header options or are malformed.
Some packet-based attack protection recommendations apply somewhat equally to all organizations. For example, prevent IP address spoofing in security zones by selecting Spoofed IP address from the Packet based protection tab
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Mohamed_Waly
2 days, 12 hours ago