Hi David,

The firewalls are not configured to confuse the scanner. The configurations
have been checked by the Checkpoint Tech Support and the Checkpoint SMEs
from our team. This is not a mis-configuration issue and SYNdefender is
disabled.

Regards,
Sanjay Naik, CISSP
Sr. Security Consultant


----Original Message Follows----
From: David Henning <dhenning@hns.com>
To: "Pawel Worach" <pawel.worach@gmail.com>
CC: bugtraq@securityfocus.com, sanjaynaik@ieee.org
Subject: Re: Checkpoint SYN DoS Vulnerability
Date: Tue, 16 May 2006 17:00:03 -0400

Souds to me like the firewall is configured to confuse scanners on
purpose. If the performance really does degrad to DoS levels then this is
more likely a mis-configuration of one of their add-ons, not an actual
bug. Have the settings for their IPS and SYN-Defender been checked
carefully?

David Henning, CISSP
Principal Security Analyst
Hughes Network Systems
x5533

__________________________________________________ _______________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/g...ave/direct/01/