Table of Contents
Advertisement
C
ONFIGURING THE
Parameter
DoS Detect Criteria
Total incomplete
TCP/UDP
sessions HIGH
Total incomplete
TCP/UDP
sessions LOW
Incomplete
TCP/UDP
sessions (per min.)
HIGH
Incomplete
TCP/UDP
sessions (per min.)
LOW
Maximum
incomplete
TCP/UDP
sessions number
from same host
Incomplete
TCP/UDP
sessions detect
sensitive time
period
Maximum
half-open
fragmentation
packet
number from
same host
Half-open
fragmentation
detect sensitive
time period
Flooding cracker
block time
4-50
V
IP ADSL R
O
Defaults Description
300
Defines the rate of new unestablished sessions that
sessions
will cause the software to start deleting half-open
sessions.
250
Defines the rate of new unestablished sessions that
sessions
will cause the software to stop deleting half-open
sessions.
250
Maximum number of allowed incomplete
sessions
TCP/UDP sessions per minute.
200
Minimum number of allowed incomplete
sessions
TCP/UDP sessions per minute.
10
Maximum number of incomplete TCP/UDP
sessions from the same host.
300 msecs Length of time before an incomplete TCP/UDP
session is detected as incomplete.
30
Maximum number of half-open fragmentation
packets from the same host.
1 secs
Length of time before a half-open fragmentation
session is detected as half-open.
300 secs
Length of time from detecting a flood attack to
blocking the attack.
OUTER
Advertisement
Table of Contents
