Hi Raymond,
No...
FloodGate is software-based bandwidth management tools
that can integrate with yr FW-1.
Yes you can assign little bandwidth for the worm,
however, it does not block the worm and it's not
intended to use as blocking worm...
you should consider to use
1. SmartDefense (subscription is needed)
2. Forescout (Activescout) it's an IPS.
hope this helps,
Nick.
[FW-1] FloodGate good for DOS type attack?
Forum: SecurePoint - CheckPoint FireWall-1 Archive
Date: Sep 25, 13:53
From: Raymond N <OutMail AT ARDENNET DOT COM>
I don't have any experience on FloodGate at all. But
learn some info about
this product in trade show. Just wondering if you
think FloodGate is a
good tool to prevent (for example) massive of
icmp-ping from one side of
the firewall to the other side of the network? I mean
those icmp-ping may
or may not target to the firewall interface directly,
but to the machines
in the other side of the network. Couple months ago,
we experienced huge
amount of ping from worm-infected machines in one
network to the other side
of the network, and the amount of traffic cause the
firewall not able to
handle other type of traffic.
Thanks for your input.
-raymond
__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
