Check Point response to "BlackNurse" attack

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk114500
Technical Level
Product	Quantum Security Gateways, VSX
Version	All
Platform / Model	All
Date Created	13-Nov-2016
Last Modified	01-Jun-2017

Symptoms

"BlackNurse" attack is a form of ICMP flooding, which may cause denial of service (for details and full report, refer to http://blacknurse.dk).

Solution

Check Point Security Gateways are not vulnerable to the "BlackNurse" attack.

General recommendations:

To prevent DoS flooding in general, follow sk112454 - How to configure Rate Limiting rules for DoS Mitigation.
If Security Gateway runs on a Virtual Machine, then enable Firewall Priority Queues as per sk105762 - Firewall Priority Queues in R77.30 / R80.10 and above.

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating