Denial Of Service; Figure 4.40 System > Advanced Configuration > Protection Denial Of Service - Advantech EKI-9516P-HV User Manual

Item
Submit
Cancel
4.3.2.6 Protection

Denial of Service

Use the Denial of Service (DoS) Configuration page to configure DoS control. FAST-
PATH SMB software provides support for classifying and blocking specific types of
DoS attacks. You can configure your system to monitor and block these types of
attacks:
To access this page, click System > Advanced Configuration > Protection >
Denial of Service.
Figure 4.40 System > Advanced Configuration > Protection > Denial of Service
The following table describes the items in the previous figure.
Item
TCP Settings
First Fragment
TCP Port
UDP Port
SIP=DIP
SMAC=DMAC
TCP FIN and URG
and PSH
TCP Flag and
Sequence
TCP SYN
TCP SYN and FIN
EKI-9500 Series User Manual
Description
Click Submit to save the values.
Click Cancel to close the window.
Description
Enable this option to allow the device to drop packets that have a TCP
header smaller than the value configured in the Min TCP Hdr Size
field.
Enable this option to allow the device to drop packets that have the
TCP source port equal to the TCP destination port.
Enable this option to allow the device to drop packets that have the
UDP source port equal to the UDP destination port.
Enable this option to allow the device to drop packets that have a
source IP address equal to the destination IP address.
Enable this option to allow the device to drop packets that have a
source MAC address equal to the destination MAC address.
Enable this option to allow the device to drop packets that have TCP
Flags FIN, URG, and PSH set and a TCP Sequence Number equal to
0.
Enable this option to allow the device to drop packets that have TCP
control flags set to 0 and the TCP sequence number set to 0.
Enable this option to allow the device to drop packets that have TCP
Flags SYN set.
Enable this option to allow the device to drop packets that have TCP
Flags SYN and FIN set.
54