1
Network Attacks And Defense Strategies
medium
A SOC analyst reviewing perimeter firewall logs notices a high volume of inbound TCP SYN packets with randomized source IP addresses targeting multiple open ports on a public-facing web server, and the server's connection table is nearly exhausted. The organization wants to stop this activity at the network edge without blocking legitimate clients. Which solution should the analyst recommend?