How do I disable abnormal_tcp_flag_detect using the CLI?

Zyxel_Jeff

Question:

The user may encounter a Monitor log message stating, 'abnormal TCP flag attack detected, DROP' However, this does not impact any services on the user's network. The user can ignore this log message or deactivate this function using the CLI. This article will guide the user on how to deactivate the function via the CLI.

Answer :

Please refer to the below CLI to deactivate this function and check the CLI result.

To deactivate this function:

Router> configure terminal
Router(config)# secure-policy abnormal_tcp_flag_detect deactivate
Router(config)# write
Router(config)# exit
To check the CLI result:
Router# show secure-policy status
secure-policy status: no
secure-policy asymmetrical route status: no
secure-policy default rule: deny, log
secure-policy tcp flag detect: no