LandAttackDetectionEnabled Property of the IFPCAttackDetection Interface

The LandAttackDetectionEnabled property gets or sets a Boolean value that indicates whether Forefront TMG will generate an event when a land attack is detected.

A land attack is one in which a Transmission Control Protocol (TCP) SYN packet is sent with a spoofed source IP address that matches the destination IP address of the Forefront TMG computer and with a port number that is allowed by the Forefront TMG rules so that the Forefront TMG computer will try to establish a TCP session with itself. If the attack succeeds, the computer enters a closed loop and must be restarted.

[C++]

HRESULT put_LandAttackDetectionEnabled(
	VARIANT_BOOL fLandAttackDetectionEnabled
);
HRESULT get_LandAttackDetectionEnabled(
	VARIANT_BOOL* pfLandAttackDetectionEnabled
);

Parameters

pfLandAttackDetectionEnabled: Pointer to a Boolean value that is set on return to VARIANT_TRUE if Forefront TMG will generate an event when a land attack is detected, or to VARIANT_FALSE if Forefront TMG will not generate an event when a land attack is detected.
fLandAttackDetectionEnabled: Boolean value that indicates whether Forefront TMG will generate an event when a land attack is detected.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

[Visual Basic]

Property LandAttackDetectionEnabled As Boolean

Property Value

Boolean value that indicates whether Forefront TMG will generate an event when a land attack is detected.

Remarks

This property is read/write. Its value is set to True (VARIANT_TRUE in C++) during Forefront TMG setup.

Land attacks can be detected only if the IntrusionDetectionEnabled property is set to True (VARIANT_TRUE in C++).

Requirements

Client	Requires Windows Vista or Windows XP.
Server	Requires Windows Server 2008.
Version	Requires Forefront Threat Management Gateway (TMG).
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.