Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary

Navigation

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Reconnaissance Deterrence Feature Guide for Security Devices

Junos OS Attack Detection and Prevention Library for Security Devices

Overview
Configuration
Administration
Troubleshooting

Supported Features

Attack Detection and Prevention
Attack Detection and Prevention Overview

IP Address and Port Options

Reconnaissance Deterrence Overview

Understanding IP Address Sweeps

Understanding TCP Port Scanning

Understanding UDP Port Scanning

Understanding Network Reconnaissance Using IP Options

Understanding Domain Name System Resolve

System Probes and Flag Set

Reconnaissance Deterrence Overview

Understanding Operating System Probes

Understanding TCP Headers with SYN and FIN Flags Set

Understanding TCP Headers With FIN Flag Set and Without ACK Flag Set

Understanding TCP Header with No Flags Set

Attacker Evasion Techniques

Reconnaissance Deterrence Overview

Understanding Attacker Evasion Techniques

Understanding FIN Scans

Understanding TCP SYN Checking

Understanding IP Spoofing

Understanding IP Spoofing in Layer 2 Transparent Mode

Understanding IP Source Route Options

IP Address and Port Options

Example: Blocking IP Address Sweeps

Enhancing Traffic Management by Blocking Port Scans

Example: Detecting Packets That Use IP Screen Options for Reconnaissance

Operating System Probes

Example: Blocking Packets with SYN and FIN Flags Set

Example: Blocking Packets With FIN Flag Set and Without ACK Flag Set

Example: Blocking Packets with No Flags Set

Attacker Evasion Techniques

Thwarting a FIN Scan (CLI Procedure)

Setting TCP SYN Checking (CLI Procedure)

Setting Strict SYN Checking (CLI Procedure)

Configuring IP Spoofing in Layer 2 Transparent Mode

Example: Blocking IP Spoofing

Example: Blocking Packets with Either a Loose or a Strict Source Route Option Set

Example: Detecting Packets with Either a Loose or a Strict Source Route Option Set

Configuration Statements

[edit security screen] Hierarchy Level

syn-flood attack

description (Security Screen)

destination-ip-based

syn-flood destination

icmp (Security Screen)

ip (Security Screen)

no-syn-check-in-tunnel

screen (Security Zones)

source-ip-based

syn-flood source

strict-syn-check

syn-ack-ack-proxy

syn-check-required

syn-flood-protection-mode

tcp (Security Screen)

timeout (Security Screen)

traceoptions (Security Screen)

udp (Security Screen)

Operational Commands

clear security screen statistics

clear security screen statistics interface

clear security screen statistics zone

show security screen ids-option

show security screen statistics

Knowledge Base
Juniper Networks Knowledge Base

Downloads

Download this guide: Reconnaissance Deterrence

Previous Page Next Page