79
In the 6HFXULW\!$GYDQFHG6HWWLQJV section, configure the following parameters and
click
Apply
.
DoS Protection Enable the DoS Protection and specify the parameters.
DoS (Denial of Service) Attack is to occupy the network bandwidth
maliciously by the network attackers or the evil programs sending a
lot of service requests to the Host, which incurs an abnormal service
or even breakdown of the network. With DoS Protection function
enabled, the device can analyze the specific fields of the IP packets
and distinguish the malicious DoS attack packets. Upon detecting the
packets, the device will discard the illegal packets directly and limit the
transmission rate of the legal packets if the over legal packets may
incur a breakdown of the network. The hosts sending these packets will
be added into the
Blocked DoS Host
List. The device can defend a few
types of DoS attack such as ICMP_FLOOD, UDP_FLOOD and TCP_SYN_
FLOOD.
3DFNHWV6WDWLVWLFV,QWHUYDO Select a value between 5 and 60 seconds
from the drop-down list. The default value is 10. The value indicates the
time interval of the packets statistics. The result of the statistic is used
for analysis by ICMP-Flood, UDP Flood and TCP-SYN Flood.
,&03B)/22'$WWDFN)LOWHU Enter a value between 5 and 3600. The
default value is 50. When the current ICMP-FLOOD Packets number
is beyond the set value, the device will start up the blocking function
immediately.
8'3B)/22'$WWDFN)LOWHU Enter a value between 5 and 3600. The
default value is 500. When the current UPD-FLOOD Packets number
is beyond the set value, the device will start up the blocking function
immediately.
7&3B6<1B)/22'$WWDFN)LOWHU Enter a value between 5 and 3600.
The default value is 50. When the current TCP-SYN-FLOOD Packets
numbers is beyond the set value, the Device will start up the blocking
function immediately.