Firewall - Planet ICG-2515-NR Series User Manual

4.7.1 Firewall

A "Denial-of-Service" (DoS) attack is characterized by an explicit attempt by hackers to prevent
legitimate users of a service from using that service. The cellular gateway can prevent specific DoS
attacks as shown in Figure
Object
SPI Firewall
Block SYN Flood
Block FIN Flood
Block UDP Flood
4-7-2.
Figure 4-7-2: Firewall
The SPI Firewall prevents attack and improper access to network
resources.
The default configuration is enabled.
SYN Flood is a popular attack way. DoS and DDoS are TCP
protocols. Hackers like using this method to make a fake connection
that involves the CPU, memory, and so on.
The default configuration is enabled.
If the function is enabled, when the number of the current FIN
packets is beyond the set value, the cellular gateway will start the
blocking function immediately.
The default configuration is disabled.
If the function is enabled, when the number of the current
UPD-FLOOD packets is beyond the set value, the cellular gateway
will start the blocking function immediately.
The default configuration is disabled.
- 85 -
Industrial 5G NR Cellular Gateway
ICG-2515-NR series
Description