Fragmented Attacks

  • From: "shivi" <shivi@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 19 Aug 2003 14:28:32 +0300

Does the ISA server detects fragmented attacks. I happen to experience an 
Intruder is continuously able to perform port scan on the external Interface 
while having his source IP blocked both on the perimeter router and on the 
firewall as a packet filter deny rule.

Any thoughts?

Shiv

NB: Firewall has IDS enabled and keeps sending alerts.


Other related posts: