[nsp-sec] Radware Fireproof Application Switch failures and SYN floods

[Chris Calvert]

Is anyone seeing failures of Radware Fireproof loadbalancing devices over the last few days?

Reports suggest that there is a known issue, the vendor is aware, and it is impacting a few people running these devices. Third-hand evidence suggests SYN flood DoS attacks.  Apparently AS2s are very prone to being knocked over, AS4s are pretty resilient, and AS6s are very difficult to take out.  What we're seeing is essentially a DoS that is highly effective against older Fireproofs.  

We have a support team chasing some issues, I'm enquiring on their behalf.  I don't have access to any packet captures from the team that supports these boxes (yet), so I have IP addresses share.

Regards,

Chris Calvert
TELUS - AS852