Check Point response to "BlackNurse" attack

Support Center > Search Results > SecureKnowledge Details

Symptoms

"BlackNurse" attack is a form of ICMP flooding, which may cause denial of service (for details and full report, refer to http://blacknurse.dk).

Solution

Check Point Security Gateways are not vulnerable to the "BlackNurse" attack.

General recommendations:

To prevent DoS flooding in general, follow sk112454 - How to configure Rate Limiting rules for DoS Mitigation.
If Security Gateway runs on a Virtual Machine, then enable Firewall Priority Queues as per sk105762 - Firewall Priority Queues in R77.30 / R80.10 and above.

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating