Security and Attack Types

DDoS, bots, IP reputation, OWASP, CWE and attack types.

• What is a DDoS attack; at which layers does TR7 provide DDoS protection?GEN-07-001
• What is the difference between L4 DDoS Protection and L7 DDoS Protection?GEN-07-002
• What is a bot; how is the difference between a good bot and a bad bot handled in TR7?GEN-07-003
• What is a CAPTCHA; in which protections is it used in TR7?GEN-07-004
• What is rate limiting; at which layers is it applied in TR7?GEN-07-005
• What is a brute-force attack; how does TR7 protect the management interface and applications against it?GEN-07-006
• What is IP Reputation; where does TR7 use IP Reputation data?GEN-07-007
• What is geolocation data; where does TR7 perform country-based control?GEN-07-008
• What are OWASP and the OWASP Top 10; where do they appear in the TR7 WAF?GEN-07-009
• What is SQL Injection?GEN-07-010
• What is Cross-Site Scripting (XSS)?GEN-07-011
• What is a botnet; how does TR7 detect a distributed attack originating from a botnet?GEN-07-012
• What is a SYN Flood attack; which rules does TR7 apply against it?GEN-07-013
• What is a UDP Flood; why does TR7 apply a separate flood limit to DNS requests?GEN-07-014
• What is a Reflection & Amplification attack; how does the TR7 device protect against this attack?GEN-07-015
• What is a Port Scan; how does TR7 detect a source performing a port scan?GEN-07-016
• What is a bot score; what do the Clean, Suspicious, Bot and Bad Bot classes mean?GEN-07-017
• What is a Verified Bot; how does TR7 treat verified search engine crawlers?GEN-07-018
• What is Waiting Room; how does it differ from an attack enforcement?GEN-07-019
• What is Quarantine; how does it differ from blocking and where is it used in TR7?GEN-07-020
• What is the difference between the Standard, Tarpit and Silent Drop blocking types?GEN-07-021
• What is an ASN; where do I see and use ASN information in TR7?GEN-07-022
• What is Network Type; how does it differ from IP Reputation?GEN-07-023
• What is a Tor exit node; how does TR7 recognize Tor traffic?GEN-07-024
• What is an open proxy; what does TR7 do by default with addresses in this category?GEN-07-025
• What is the VPN IP category; why doesn't TR7 block VPN addresses by default?GEN-07-026
• What is the difference between the OWASP Top 10 (Web) and the OWASP API Top 10?GEN-07-027
• What is CWE; why does it appear in TR7 WAF logs and reports?GEN-07-028
• What is MITRE ATT&CK; what do the MITRE ATT&CK and MITRE Post-Exploit fields in TR7 show?GEN-07-029
• What is a zero-day attack?GEN-07-030
• What is a Directory / Path Traversal attack?GEN-07-031
• What are LFI and RFI (Local / Remote File Inclusion) attacks?GEN-07-032
• What is OS Command Injection?GEN-07-033
• What is SSRF (Server-Side Request Forgery)?GEN-07-034
• What is Threat State; what do the bands from No Attack to Active Attack describe?GEN-07-035
• What are SYN Cookies; when do they come into play in TR7?GEN-07-036
• What is a Smurf attack; what do the Smurf rules in TR7 limit?GEN-07-037
• What is spoofing; what do the Spoofing, LAND / Self-Spoof and Martians settings in TR7 catch?GEN-07-038
• What are Null Flood and Christmas Tree Scan; why does TR7 block these packets without false positive risk?GEN-07-039
• What is a TLS fingerprint (JA3 / JA4); how does TR7 use it in bot detection?GEN-07-040
• What is CAPEC; how does it differ from CWE?GEN-07-041
• What is an XXE (XML External Entity) attack?GEN-07-042
• What is HTTP Request Smuggling?GEN-07-043
• What is LLM prompt injection?GEN-07-044
• What is Application DoS; how does it differ from volumetric DDoS?GEN-07-045