Cisco® Secure Internet Security Solutions

TCP Intercept

TCP Intercept tracks, intercepts, and validates TCP connection requests. This shields the local host from being contacted directly by a nontrusted network or host. Therefore, any DoS attacks attempted on the host are actually carried out against the router, which will be prepared to survive such attacks. TCP Intercept uses fast switching, except on the RS/RP/SSP-based Cisco 7000 series, which only uses process switching.

TCP Intercept operates in one of two modes, monitor mode and intercept mode. Monitor mode allows connections directly to the local host while monitoring the status of these connections. The router, because of the number of open connections or timeout limitations, drops existing and partially opened connections as ...