User's Manual Part 2

Using SmartDefense
226 Check Point Safe@Office User Guide
SmartDefense Categories
SmartDefense includes the following categories:
• Denial of Service on page 226
• IP and ICMP on page 231
• TCP on page 241
• Port Scan on page 244
• FTP on page 247
• Microsoft Networks on page 251
• IGMP on page 253
• Peer to Peer on page 254
• Instant Messengers on page 256
Denial of Service
Denial of Service (DoS) attacks are aimed at overwhelming the target with
spurious data, to the point where it is no longer able to respond to legitimate
service requests.
This category includes the following attacks:
• Teardrop on page 226
• Ping of Death on page 227
• LAND on page 228
• Non-TCP Flooding on page 229
Teardrop
In a Teardrop attack, the attacker sends two IP fragments, the latter entirely
contained within the former. This causes some computers to allocate too much
memory and crash.