Information
Enables threat detection statistics for attacks blocked by the TCP Intercept function
Rationale:
The TCP Intercept function helps protecting the network and particularly servers against DOS attacks. When the maximum count of allowed connections is reached, through the TCP Intercept function, the firewall will no longer allow connection to the impacted server and will act as a proxy to the attack server until a valid traffic is received.
Enabling statistics can help to prevent the attacks at the earliest stage possible upstream.
Solution
Run the following to enable threat detection statistics for TCP Intercept
hostname(config)# threat-detection statistics tcp-intercept
Default Value:
Not enable by default