Table of Contents
Advertisement
Chapter 15 Security
port number and protocol (a "trigger" port). When the P-794H's WAN port receives
a response with a specific port number and protocol ("open" port), the P-794H
forwards the traffic to the LAN IP address of the computer that sent the request.
After that computer's connection for that service closes, another computer on the
LAN can use the service in the same manner. This way you do not need to
configure a new IP address each time you want a different LAN computer to use
the application.
DoS
Denials of Service (DoS) attacks are aimed at devices and networks with a
connection to the Internet. Their goal is not to steal information, but to disable a
device or network so users no longer have access to network resources. The P-
794H is pre-configured to automatically detect and thwart all known DoS attacks.
ICMP
Internet Control Message Protocol (ICMP) is a message control and error-reporting
protocol between a host server and a gateway to the Internet. ICMP uses Internet
Protocol (IP) datagrams, but the messages are processed by the TCP/IP software
and directly apparent to the application user.
DoS Thresholds
For DoS attacks, the P-794H uses thresholds to determine when to drop sessions
that do not become fully established. These thresholds apply globally to all
sessions. You can use the default threshold values, or you can change them to
values more suitable to your security requirements.
15.2 The Security Interface Configuration Screen
Click Security > Fire Wall to open the Security Interface Configuration
screen. You can configure security state, security interface, and firewall policies.
15.2.1 Security State and Level
Click Security > Fire Wall to open the Security Interface Configuration
screen. You can enable or disable Security, Firewall, or Intrusion Detection in
180
P-794H User's Guide
Advertisement
Table of Contents
