Traffic being identified as a threat ID 8732

Traffic being identified as a threat ID 8732

11439
Created On 03/20/20 01:57 AM - Last Modified 09/18/26 14:24 PM


Question


  • Traffic is being identified as a threat ID 8732

Answer



Threat ID 8732 is an informational-level alert for the first packet of a TCP session that is not a SYN packet (non-syn-TCP) when enabling Packet-Based Attack Protection in a Zone Protection profile introduced in PAN-OS software 8.1.2 and later releases, together with an optional CLI command to enable the firewall to generate a Threat log when the firewall receives and drops the following types of packets.
 

admin@PA> show threat id 8732
This event is triggered when encountering a TCP packet which does not belong to an existing session. Any new session is expected to begin with a SYN packet and dropped if not so.

informational
Unknown

Additional Information


PAN-OS 8.1 - Networking-Features

Configure Packet-Based Attack Protection
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPAxCAO&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language