Dos Defense - Draytek Vigor3900 User Manual

4 . 5 . 2 D o
4 . 5 . 2 D o
VoIPon www.voipon.co.uk sales@voipon.co.uk Tel: (0)330 088 0195 Fax: +44 (0)1245 808299
S D e f e n s e
S D e f e n s e
The DoS function helps to detect and mitigates DoS attacks. These include flooding-type
attacks and vulnerability attacks. Flooding-type attacks attempt to use up all your system's
resources while vulnerability attacks try to paralyze the system by offending the
vulnerabilities of the protocol or operation system.
4 4 . . 5 5 . . 2 2 . . 1 1 S S w w i i t t c c h h
Available parameters are listed as follows:
Item
Broadcast Storm
Defense
Multicast Storm
Defense
Unknown Unicast
Storm Defense
Unknown Multicast
Storm Defense
Storm Filtering Rate
Refresh
Apply
4 . 5 . 2 . 2 S y s t e m
4 . 5 . 2 . 2 S y s t e m
In the Firewall group, click the DOS Defense and click the tab of System. You will see the
following page. The DoS Defense Engine inspects each incoming packet against the attack
signature database. Any packet that may paralyze the host in the security zone is blocked.
The DoS Defense Engine also monitors traffic behavior. Any anomalous situation violating
the DoS configuration is reported and the attack is mitigated.
Description
Click Enable to block the packets attacks coming from
broadcast storm.
Click Enable to block the packets attacks coming from
multicast storm.
Click Enable to block the packets attacks coming from
unknown unicast storm.
Click Enable to block the packets attacks coming from
unknown multicast storm.
Type a number (1~4096, unit of 64Kpbs) as for the filtering
rate.
The default value for different hardware version will be
varied. Default value of "-1" means no limit in filtering rate.
Renew current web page.
Click it to save the configuration.
216 Vigor3900 Series User's Guide