IPv4 Firewall Protection
135
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
2. Select the Yes radio button under Do you want to enable Session Limit?
3. Ente
r the settings as explained in the following table:
4. Click App
ly to save your settings.
Manage the Application Level Gateway for SIP Sessions
The application level gateway (ALG) facilitates multimedia sessions such as voice over IP
(VoIP) sessions that use the Session Initiation Protocol (SIP) across the firewall and provides
support for multiple SIP clients. ALG support for SIP is disabled by default.
To enable ALG for SIP:
1. Select Se
curity > Firewall > Advanced. The Advanced screen displays:
Table 30. Session Limit screen settings
Setting Description
Session Limit
User Limit Parameter From the User Limit Parameter drop-down list, select one of the following options:
• Percentage of Max Sessions. A percentage of the total session connection
capacity of the wireless VPN firewall.
• N
umber of Sessions. An absolute number of maximum sessions.
User Limit Enter a number to indicate the user limit. Note the following:
• If the User Limit Parameter is set to Percentage of Max Sessions, the number
spe
cifies the maximum number of sessions that are allowed from a single-source
device as a percentage of the total session connection capacity of the wireless
VPN firewall. (The session limit is per-device based.)
• If the User Limit Parameter is set to N
umber of Sessions, the number specifies
an absolute value.
Note: Some protocols such as FTP and RSTP crea
te two sessions per connection,
which should be considered when configuring a session limit.
Total Number of
Pa
ckets Dropped due
to Session Limit
This is a nonconfigurable counter that displays the total number of dropped packets
when the session limit is reached.
Session Timeout
TCP Timeout For each protocol, specify a time-out in seconds. A session expires if no data for
the session is received for the duration of the time-out period. The default time-out
periods are 1800 seconds for TCP sessions, 120 seconds for UDP sessions, and
60 seconds for ICMP sessions.
UDP Timeout
ICMP Timeout