Table of Contents
Advertisement
Session Limit & Firewall Exception
Session Limit
This new feature allows to drop the new sessions from both WAN and LAN side. If the new sessions number are exceed the maximum sessions in a sampling time.
Settings - Session Limit
Sample Time
Maximum of Total New session If the number of new sessions for system exceed the maximum in the Sampling Time. Any new sessions in the system will be dropped. (Default: 65535
Maximum of New Sessions for
Host
Maximum of Dropped New
Sessions for Host
Pause Time
Firewall Exception
System Firewall Exception Rules: The rules with which any received packets is complied, the packets will not processed by Firewall or NAT module, but to be
processed directly by system protocol stack.
Settings - Firewall Exception
Enable
Interface
Protocol
Foreign Port Range
Device Port Range
The period to count the
400 mil-sec)
session/sec)
If the number of new sessions for the host exceeds the maximum in the sampling time. Any new session of the host will be dropped. (Default: session/
sec)
If the number of
pause time.
Within the pause time, no new session of the suspended host could be served by system.( Default is 5 minutes)
The check box can allow you enable or disable firewall exception.
You can select LAN, WAN1, WAN2 or ALL interfaces to be process by the system protocol stack.
There are six protocols (UDP/TCP/ICMP/GRE/ESP/AH) to choose from. This allows packets to be directly processed by the system protocol stack.
Select foreign port number range directly process by system protocol stack. Click the check box to enable.
Select device port number range directly process by system protocol stack. Click the check box to enable.
32
Advertisement
Table of Contents
