InformationEnables threat detection statistics for attacks blocked by the TCP Intercept function
The TCP Intercept function helps protecting the network and particularly servers against DOS attacks. When the maximum count of allowed connections is reached, through the TCP Intercept function, the firewall will no longer allow connection to the impacted server and will act as a proxy to the attack server until a valid traffic is received.
Enabling statistics can help to prevent the attacks at the earliest stage possible upstream.
SolutionThreat Detection can be configured through FlexConfig in Firepower Management Center:
Step 1 - Devices > FlexConfig
Step 2 - Use the predefined FlexConfig - Threat_Detection_Configure option