Chapter 5 Security; Firewall - Planet VRT-402N User Manual

5.1

Firewall

VRT-402N provides extensive firewall protection by restricting connection parameters, thus limiting the
risk of hacker attack, and defending against a wide array of common Internet attacks.
Configure Security Settings following the instructions below.
SPI Firewall Protection
TCP SYN DoS Protection
Select Enable to enable SPI Firewall Protection.
Select Disable to disable SPI Firewall Protection.
Check to enable TCP SYN DoS Protection.
Uncheck to disable TCP SYN DoS Protection.
TCP SYN DoS attack sends a flood of TCP/SYN packets. Each of these packets are like a
connection request, causing the server to consume computing resources (e.g. memory,
CPU) to reply and to continuously wait for the incoming packets. Without TCP SYN Dos
Protection, the resources in the server will be easily consumed completely. This will then
consequently result in the dysfunction of the server.
PLANETCom Mobile Router is able to detect TCP SYN DoS attacks and limits the resource
consumption by lowering the incoming request rate by fast recycling the resource.
Therefore, PLANETCom Mobile Router is still able to serve normal traffic while it is under
such an attack.
30

Chapter 5 Security