IPHalfScanDetectionEnabled Property of the IFPCAttackDetection Interface
The IPHalfScanDetectionEnabled property gets or sets a Boolean value that indicates whether Forefront TMG will generate an event when an IP half-scan attack is detected.
An IP half-scan attack, or a stealth attack, is one in which the source computer sends a TCP packet with a flag that does follow the expected sequence, instead of an ACK packet, when a connection is completed so that the connection will not be logged and the source computer can continue to scan ports on the targeted computer without generating log entries.
C++
HRESULT put_IPHalfScanDetectionEnabled(
VARIANT_BOOL fIPHalfScanDetectionEnabled
);
HRESULT get_IPHalfScanDetectionEnabled(
VARIANT_BOOL* pfIPHalfScanDetectionEnabled
);
Parameters
fIPHalfScanDetectionEnabled
Boolean value that indicates whether Forefront TMG will generate an event when an IP half-scan attack is detected.pfIPHalfScanDetectionEnabled
Pointer to a Boolean value that is set on return to VARIANT_TRUE if Forefront TMG will generate an event when an IP half-scan attack is detected, or to VARIANT_FALSE if Forefront TMG will not generate an event when an IP half-scan attack is detected.
Return Value
These property methods return S_OK if the call is successful; otherwise, they return an error code.
Visual Basic
Property IPHalfScanDetectionEnabled As Boolean
Property Value
Boolean value that indicates whether Forefront TMG will generate an event when an IP half-scan attack is detected.
Remarks
This property is read/write. Its value is set to True (VARIANT_TRUE in C++) during Forefront TMG setup.
IP half-scan attacks can be detected only if the IntrusionDetectionEnabled property is set to True (VARIANT_TRUE in C++).
Requirements
Client | Requires Windows 7 or Windows Vista. |
Server | Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2. |
Version | Requires Forefront Threat Management Gateway (TMG) 2010. |
IDL | Declared in Msfpccom.idl. |
DLL | Requires Msfpccom.dll. |
See Also
Send comments about this topic to Microsoft
Build date: 6/30/2010