Screen options are used to detect and prevent attacks such as floods, scans, and malformed packets. In some cases, false positives may occur, where legitimate traffic is mistakenly identified as malicious.
To address this, administrators can configure the alarm-without-drop option (Option D). This setting generates alarms/logs for suspicious traffic without actually dropping it, allowing verification before taking further action.
Enabling all screen options (Option A) may increase false positives further.
Discarding traffic immediately (Option B) risks disrupting legitimate communication.
Increasing sensitivity (Option C) worsens the problem, since false positives would increase.
Correct Action: Use alarm-without-drop to log the traffic without dropping it.
[Reference: Juniper Networks – Junos OS Screen Options and Troubleshooting, Junos OS Security Fundamentals., ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit