A grossly oversized ICMP packet can trigger a range of adverse system reactions such as denial of service (DoS), crashing, freezing, and rebooting.
Before You Begin |
---|
For background information, read Understanding Ping of Death Attacks. |
You can use either J-Web or the CLI configuration editor to enable protection against a ping of death attack. The specified zone is where the attack originates.
This topic covers:
To configure screens:
To configure zones:
- user@host# set security screen ids-option
ping-death icmp ping-death
- user@host# set security zones security-zone
zone screen ping-death