PCI Compliance

Mike11224466

Hi,

I have TZ400 and updated to latest firmware.

My PCI compliance is not passing and I really need to figure it out. Three issues:

I really appreciate any help

TCP/IP : TCP Sequence Number Approximation Based Denial of Service

CGI: HTTP Security Header Not Detected : 81 / tcp

CGI: Session Cookie Does Not Contain the "Secure" Attribute: 81 / tcp

Saravanan

Hi @MIKE11224466,

Thank you for visiting SonicWall Community.

Regarding "TCP/IP : TCP Sequence Number Approximation Based Denial of Service", please try to enable the highlighted check boxes in the SonicWall appliance.

For the other two scan results, please check if the port TCP 81 is assigned to the SonicWall's web management or port opened to a local host behind SonicWall.

Hope this helps. Keep us posted.

BWC

Hi @Mike11224466

about the TCP/IP sequence you should check this if it is disabled for any reason.

https://www.sonicwall.com/support/knowledge-base/unable-to-access-city-or-state-sponsored-sites-behind-a-sonicwall-firewall/170505690107664/

https://www.shanekillen.com/2014/10/sonicwall-tcp-seq-num-approximation.html

It might be related to Syn Flood Protection as well, but you probably checked already if this is reddit:

https://www.reddit.com/r/sonicwall/comments/jqf3hn/pci_compliance_scan_fails/

About the Port 81 complains, is this SNWL related and if yes what part of your SNWL deployment is bound on port 81?

--Michael@BWC