IKE service
Hi,
Our analysis shows that the IKE service ( gateway) is clearly visible and can be used by attackers for reconnaissance and targeting. How can we make the IKE service not clearly visible ("hide") in ATP 200?
I am waiting your answer
All Replies
-
Hi @erichanno
Welcome to the Zyxel community. Could you please share a screenshot to help describe the problem? Feel free to hide sensitive information, such as source and destination IP addresses, in the screenshot. Thanks.
See how you've made an impact in Zyxel Community this year!
0 -
To hide the IKE service on an ATP 200, you can configure the firewall to block or obscure IKE traffic by disabling unnecessary services or changing the default ports for IKE (UDP 500/4500).
0 -
How would you change them default ports for IKE (UDP 500/4500)😏
0 -
I suggest you limit the incoming traffic to IKE service with GeoIP restrictions via Security Policy rules. It works perfectly for us.
0
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 147 Nebula Ideas
- 96 Nebula Status and Incidents
- 5.7K Security
- 262 USG FLEX H Series
- 271 Security Ideas
- 1.4K Switch
- 74 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.4K Consumer Product
- 249 Service & License
- 387 News and Release
- 84 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.5K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 73 Security Highlight