NETGEAR SRX5308 User Manual

Firewall Protection
108
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 56.
2. Enter the settings as explained in the following table:
Table 20. Attack Checks screen settings
Setting Description
WAN Security Checks
Respond to Ping on
Internet Ports
Select the Respond to Ping on Internet Ports check box to enable the VPN
firewall to respond to a ping from the Internet. A ping can be used as a diagnostic
tool. Keep this check box cleared unless you have a specific reason to enable the
VPN firewall to respond to a ping from the Internet.
Enable Stealth Mode Select the Enable Stealth Mode check box (which is the default setting) to prevent
the VPN firewall from responding to port scans from the WAN, thus making it less
susceptible to discovery and attacks.
Block TCP flood Select the Block TCP flood check box to enable the VPN firewall to drop all invalid
TCP packets and to protect the VPN firewall from a SYN flood attack.
A SYN flood is a form of denial of service attack in which an attacker sends a
succession of SYN (synchronize) requests to a target system. When the system
responds, the attacker does not complete the connections, thus leaving the
connection half-open and flooding the server with SYN messages. No legitimate
connections can then be made. By default, the Block TCP flood check box is
cleared.

NETGEAR SRX5308 Specifications

General

Brand	NETGEAR
Model	SRX5308
Category	Firewall
Language	English