Personal Stateful Firewall Overview
Supported Features ▀
Cisco ASR 5000 Series Product Overview ▄
OL-22938-02
UDP-based Attacks:
Invalid UDP echo response
Invalid UDP packet length
UDP checksum errors
Short UDP header length
UDP flood attack — Detected only in downlink direction
ICMP-based Attacks:
Invalid ICMP response
ICMP reply error
Invalid ICMP type packet
ICMP error message replay attacks
ICMP packets with duplicate sequence number
Short ICMP header length
Invalid ICMP packet length
ICMP flood attack — Detected only in downlink direction
Ping of death attacks
ICMP checksum errors
ICMP packets with destination unreachable message
Other DoS Attacks:
Port-scan attacks — Detected only in downlink direction
Protection against Port Scanning
Port scanning is a technique used to determine the states of TCP/UDP ports on a network host, and to map out hosts on
a network. Essentially, a port scan consists of sending a message to each port on the host, one at a time. The kind of
response received indicates whether the port is used, and can therefore be probed further for weakness. This way
hackers find potential weaknesses that can be exploited.
Stateful Firewall provides protection against port scanning by implementing port scan detection algorithms. Port-scan
attacks are only detected in the downlink direction—traffic from external network towards mobile subscribers.
Application-level Gateway Support
A stateful firewall while ensuring that only legitimate connections are allowed, also maintains the state of an allowed
connection. Some network applications require additional connections to be opened up in either direction and
information regarding such connections is sent in the application payload. For these applications to work properly, a
stateful firewall must inspect, analyze, and parse these application payloads to get the additional connection
information, and open partial connections/pinholes in the firewall to allow the connections.
Summary of Contents for ASR 5000 Series
Page 1: ......
Page 26: ......
Page 48: ...New In Release 10 0 SCM Features Cisco ASR 5000 Series Product Overview OL 22938 02 ...
Page 50: ......
Page 58: ......
Page 68: ......
Page 126: ......
Page 138: ......
Page 146: ......
Page 218: ......
Page 236: ......
Page 356: ......
Page 374: ......
Page 422: ......
Page 496: ......
Page 572: ......
Page 654: ......
Page 700: ......
Page 726: ......
Page 784: ......
Page 816: ......
Page 844: ......
Page 906: ......
Page 926: ......
Page 942: ......
Page 943: ...Cisco ASR 5000 Series Product Overview OL 22938 02 Chapter 30 Technical Specifications ...
Page 966: ......
Page 972: ......