ASP_IDS_SYN_COOKIE_OFF

System Log Message

ASP_IDS_SYN_COOKIE_OFF:
Host destination-address, SYN-COOKIE protection deactivated

Description

Intrusion detection services (IDS) deactivated SYN cookie protection for the indicated destination address. IDS deactivates this protection when it learns from the stateful firewall that the rate of certain events has returned to a level below the threshold set by the threshold statement at the [edit services ids rule rule-name term term-name then syn-cookie] hierarchy level. The relevant events include the ones reported by the ASP_IDS_TCP_SYN_ATTACK, ASP_SFW_SYN_DEFENSE, and ASP_SFW_TCP_SCAN system log messages.

Type

Event: This message reports an event, not an error

Severity

error