Controlling the data traffic
8.1
Helping protect against unauthorized access
100
UM Config GRS
Release
8.0
09/2019
The
ICMP
frame offers you 2 filter options for ICMP packets. Fragmentation of incoming ICMP
packets is a sign of an attack. If you activate this filter, then the device detects fragmented ICMP
packets and discards them. Using the
Allowed payload size [byte]
parameter, you can also specify the
maximum permissible size of the payload of the ICMP packets. The device discards data packets
that exceed this byte specification.
Note: You can combine the filters in any way in the
Network Security > DoS > Global
dialog. When
several filters are selected, a logical Or applies: If the first or second (or the third, etc.) filter applies
to a data packet, then the device discards it.