Figure 49 Firewall: Intrusion Detection - ZyXEL Communications ZyXEL Prestige 794M User Manual

Table 34 IDS: Detectable Attacks (continued)
NAME
SYN/FIN/
RST/ACK
Scan
Net Bus
Scan
Back Orifice
Scan
SYN Flood
ICMP Flood
ICMP Echo
Click Configuration, Firewall and Intrusion Detection in the navigation panel to display the
screen as shown.
Note: The Intrusion Detection screen is available when you enable the firewall
feature on the Prestige.

Figure 49 Firewall: Intrusion Detection

Chapter 6 Firewall
PARAMETER BLACKLIST
TCP, Source IP
No Existing session
And Scan Hosts more
than five.
TCP Source IP
No Existing session
DstPort = Net Bus
12345,12346, 3456
UDP, DstPort = Source IP
Orifice Port (31337)
Max TCP Open
Handshaking Count
(Default 100 c/sec)
Max ICMP Count
(Default 100 c/sec)
Max PING Count
(Default 15 c/sec)
Prestige 794M User's Guide
TYPE OF BLOCK
DROP PACKET LOG
DURATION
Scan Yes
Scan Yes
Scan Yes
Yes
Yes
Yes
Yes
Yes
Yes
72