A network hacker introduces a packet with duplicate sequence numbers to disrupt an IPsec session. During this, high-priority traffic is transmitted. What design parameter helps mitigate this?
B: The IPsec anti-replay mechanism protects against packet injection and replay attacks by rejecting packets outside the anti-replay window. Increasing the anti-replay window (e.g., to 4096) allows legitimate packets with slightly reordered or delayed sequence numbers to be accepted—especially critical during bursts or with asymmetric paths.
D: Shaping affects traffic rate, not sequence validation.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit