Table of Contents
Advertisement
D
e
n
i
a
l
D
e
n
i
a
The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks
are usually categorized into two types, the flooding-type attacks and the vulnerability attacks.
The flooding-type attacks will attempt to exhaust all your system's resource while the
vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the
protocol or operation system.
The DoS Defense function enables the Vigor router to inspect every incoming packet based on
the attack signature database. Any malicious packet that might duplicate itself to paralyze the
host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning, if
you set up Syslog server.
Also the Vigor router monitors the traffic. Any abnormal traffic flow violating the pre-defined
parameter, such as the number of thresholds, is identified as an attack and the Vigor router will
activate its defense mechanism to mitigate in a real-time manner.
The below shows the attack types that DoS/DDoS defense function can detect:
1. SYN flood attack
2. UDP flood attack
3. ICMP flood attack
4. Port scan
5. TCP Flag scan
6. Trace route
7. IP options
8. Unknown protocol
9. Land
U
R
L
C
U
R
L
C
To provide an appropriate cyberspace to users, Vigor router equips with URL Content Filter
not only to limit illegal traffic from/to the inappropriate web sites but also prohibit other web
feature where malicious code may conceal.
Once a user type in or click on an URL with objectionable keywords, URL keyword blocking
facility will decline the HTTP request to that web page thus can limit user's access to the
website. You may imagine URL Content Filter as a well-trained convenience-store clerk who
won't sell adult magazines to teenagers. At office, URL Content Filter can also provide a
job-related only environment hence to increase the employee work efficiency. How can URL
Content Filter work better than traditional firewall in the field of filtering? Because it checks
the URL strings or some of HTTP data hiding in the payload of TCP packets while legacy
firewall inspects packets based on the fields of TCP/IP headers only.
On the other hand, Vigor router can prevent user from accidentally downloading malicious
codes from web pages. It's very common that malicious codes conceal in the executable objects,
such as ActiveX, Java Applet, compressed files, and other executable files. Once downloading
these types of files from websites, you may risk bringing threat to your system. For example, an
ActiveX control object is usually used for providing interactive web feature. If malicious code
hides inside, it may occupy user's system.
Below shows the menu items of Firewall:
Vigor110 User's Guide
o
f
S
e
r
v
i
c
e
(
D
o
S
)
l
o
f
S
e
r
v
i
c
e
(
D
o
S
)
o
n
t
e
n
t
F
i
l
t
e
r
i
n
g
o
n
t
e
n
t
F
i
l
t
e
r
i
n
g
D
e
f
e
n
s
e
D
e
f
e
n
s
e
10. Smurf
11. SYN fragment
12. ICMP fragment
13. Tear drop
14. Fraggle attack
15. Ping of Death
31
Hide quick links:
Advertisement
Table of Contents
