Non-DNP3 Traffic over DNP3 Port
|Check Point Reference:||CPAI-2012-757|
|Protection Provided by:||
Who is Vulnerable?
SCADA DNP3 Outstation
This protection will monitor DNP3 commands.
To configure the defense, select your product from the list below and follow the related protection steps.
Security Gateway R75 / R71 / R70
How Can I Protect My Network?
- In the IPS tab, click Protections and find the Non-DNP3 Traffic over DNP3 Port protection using the Search tool and Edit the protection's settings.
- Install policy on all modules.
How Do I Know if My Network is Under Attack?
SmartView Tracker will log the following entries:
Attack Name: SCADA Protection Violation
Attack Information: Non-DNP3 Traffic over DNP3 Port