ZyXEL Communications ZyXEL ZyWALL 50 User Manual page 145

ZyWALL 50 Internet Security Gateway
FIELD
Denial of Service Thresholds
One Minute Low
One Minute High
Maximum Incomplete
Low
Maximum Incomplete
High
TCP Maximum
Incomplete
9-10
Table 9-3 Attack Alert
DESCRIPTION
This is the rate of new half-open sessions
that causes the firewall to stop deleting
half-open sessions. The ZyWALL
continues to delete half-open sessions as
necessary, until the rate of new
connection attempts drops below this
number.
This is the rate of new half-open sessions
that causes the firewall to start deleting
half-open sessions. When the rate of new
connection attempts rises above this
number, the ZyWALL deletes half-open
sessions as required to accommodate
new connection attempts.
This is the number of existing half-open
sessions that causes the firewall to stop
deleting half-open sessions. The ZyWALL
continues to delete half-open requests as
necessary, until the number of existing
half-open sessions drops below this
number.
This is the number of existing half-open
sessions that causes the firewall to start
deleting half-open sessions. When the
number of existing half-open sessions
rises above this number, the ZyWALL
deletes half-open sessions as required to
accommodate new connection requests.
Do not set Maximum Incomplete High to
lower than the current Maximum
Incomplete Low number.
This is the number of existing half-open
TCP sessions with the same destination
DEFAULT VALUES
80 existing half-open sessions.
100 half-open sessions per
minute. The above numbers
cause the ZyWALL to start
deleting half-open sessions
when more than 100 session
establishment attempts have
been detected in the last minute,
and to stop deleting half-open
sessions when fewer than 80
session establishment attempts
have been detected in the last
minute.
80 existing half-open sessions.
100 half-open sessions per
minute. The above values
causes the ZyWALL to start
deleting half-open sessions
when the number of existing
half-open sessions rises above
100, and to stop deleting half-
open sessions with the number
of existing half-open sessions
drops below 80.
10 existing half-open TCP
sessions.
Using the ZyWALL Web Configurator