How can you protect CDP from reconnaissance attacks?