IBM Support

Disabling TCP timestamps on QRadar Network Security sensors

Question & Answer


Question

Is it possible to disable TCP timestamps on QRadar Network Security (XGS) sensors?

Cause

TCP timestamps are defined in RFC 1323. Some users might want to disable the transmission of this information as it can be used to calculate the uptime or boot time of a server.

Answer

It is not possible to disable TCP timestamps on the XGS sensor currently.

If you would like to see this functionality added to the XGS in a future release, follow the instructions in Technote 1682719: How to submit enhancement requests for IBM Security products to open a Request for Enhancement with IBM development.

[{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General Information","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"General Information","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
24 January 2021

UID

swg21980537