Table of Contents
Advertisement
4
.
3
.
3
S
e
s
s
i
o
n
4
.
3
.
3
S
e
s
s
i
o
n
A PC with private IP address can access to the Internet via NAT router. The router will
generate the records of NAT sessions for such connection. The P2P (Peer to Peer) applications
(e.g., BitTorrent) always need many sessions for procession and also they will occupy over
resources which might result in important accesses impacted. To solve the problem, you can
use limit session to limit the session procession for specified Hosts.
Please define the available session number for the router. If you do not set the session number
in this field, the system will use the default session limit (25000) for the specific limitation.
4
.
4
F
i
r
e
w
a
l
l
4
.
4
F
i
r
e
w
a
l
l
B
B
a
a
s
s
i
i
c
c
s
s
While the broadband users demand more bandwidth for multimedia, interactive applications,
or distance learning, security has been always the most concerned. The firewall of the Vigor
router helps to protect your local network against attack from unauthorized outsiders. It also
restricts users in the local network from accessing the Internet. Furthermore, it can filter out
specific packets that trigger the router to build an unwanted outgoing connection.
D
e
n
i
a
l
D
e
n
i
a
l
The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks
are usually categorized into two types, the flooding-type attacks and the vulnerability attacks.
The flooding-type attacks will attempt to exhaust all your system's resource while the
vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the
protocol or operation system.
The DoS Defense function enables the Vigor router to inspect every incoming packet based on
the attack signature database. Any malicious packet that might duplicate itself to paralyze the
host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning, if
you set up Syslog server.
Also the Vigor router monitors the traffic. Any abnormal traffic flow violating the pre-defined
parameter, such as the number of thresholds, is identified as an attack and the Vigor router will
activate its defense mechanism to mitigate in a real-time manner.
Below shows the menu items for Firewall.
L
i
m
i
t
L
i
m
i
t
f
f
o
o
r
r
F
F
i
i
r
r
e
e
w
w
a
a
l
l
l
l
o
f
S
e
r
v
i
c
e
(
D
o
S
)
D
o
f
S
e
r
v
i
c
e
(
D
o
S
)
D
e
f
e
n
s
e
e
f
e
n
s
e
82
VigorFly 200 Series User's Guide
Hide quick links:
Advertisement
Table of Contents
