Fortinet 548B - Page 308

- 308 -
Syntax
dos-control tcpsynfin
no dos-control tcpsynfin
no - This command disables the TCP SYN & FIN Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
7.13.2.16 dos-control tcpoffset
This command enables the TCP Fragment Offset Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active for this type of attack. If packets ingress having TCP Header Offset
equal to one (1), the packets will be dropped if the mode is enabled.
Syntax
dos-control tcpoffset
no dos-control tcpoffset
no - This command disables the TCP Fragment Offset Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
7.13.2.17 dos-control all
This command enables the Denial of Service protection checks globally.
Syntax
dos-control all
no dos-control all
no - This command disables the Denial of Service protection checks globally.