PCI Compliance Scanner Reports All Ports Open

Issue

• Testing with PCI compliance Scanner is producing false positives for vulnerabilities on the firewall.
• When running a port scan on the device, all ports scanned report open.

Resolution

• All ports will report open, when a Management profile is enabled and the Zone Protection setting is Syn Flood with it's default settings.
• In order to address this issue, browse to Network > Zone Protection Profile > Change Syn Cookie to Random Early Drop and commit the change.
• At this point, all ports should not be open.

owner: ppolizzi