Hirschmann HiSecOS EAGLE20 - Dos Global

Network Security > DoS > Global
Network Security
180
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
Network Security > DoS > Global
4.16 DoS Global
With this dialog you can configure the DoS settings for the TCP/UDP, IP and
ICMP protocols.
 TCP/UDP
The attaching stations uses port scans to prepare network attacks. Here
the station attempts to use the network to detect the devices present and
the services they provide.
This frame allows you to activate or deactivate the detection of port scans.
The device detects the following scan types:
 Null scan
 Xmas scan
 SYN/FIN scan
 TCP offset protection
 TCP SYN protection
 L4 port protection
 Minimal header scan
Parameters Meaning
Activate Null Scan
Filter
Activates/deactivates the null scan.
Possible values:
 marked
The device detects incoming data packets with no TCP flags set and
the TCP sequence number reset to 0 and discards them.
 unmarked (default setting)
The null scan is inactive.
Activate Xmas Filter Activates/deactivates the Xmas scan.
Possible values:
 marked
The device detects incoming data packets with the TCP flags FIN,
URG and PUSH set simultaneously and the TCP sequence number
reset to 0 and discards them.
 unmarked (default setting)
The Xmas scan is inactive.