Slowloris

cloza · ‎06-23-2009

Hi, does anyone have idea to mitigate/block this dos attack with FGT? For ref: http://ha.ckers.org/blog/20090617/slowloris-http-dos/

lmuir · ‎06-28-2009

Yes, use a DoS sensor. Depending in your traffic patterns, you might still have trouble mitigating a DDoS attack but then again, so do most people.

Secure_IT_BE_Nick · ‎07-03-2009

I tested slowloris on our fgates, FG detects it as http-request smuggling. In combination with quarantaining an excellent solution :)

[link]https://www.secure-it.be[/link]

TopJimmy · ‎07-09-2009

how did you set it up?

-TJ

Carl_Wallmark · ‎07-10-2009

install FortiOS ver. 4 Then you can quarantine attackers IP with IPS profiles, sweeet ! ;)

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

Slowloris

Nominate a Forum Post for Knowledge Article Creation