Figure 4.69 Security > Dos Prevention > Dos Port Settings - Advantech EKI-7428 Series User Manual

Item
UDP Blat
TCP Blat
POD
IPv6 Min Fragment
ICMP Fragments
IPv4 Ping Max Size
IPv6 Ping Max Size
Ping Max Size
Setting
Smurf Attack
TCP Min Hdr Size
TCP-SYN
(SPORT < 1024)
Null Scan Attack
X-Mas Scan Attack
TCP SYN-FIN Attack Click Enabled or Disabled to set the TCP synchronization
TCP SYN-RST
Attack
TCP Fragment
(Offset = 1)
Apply
The ensuing table for DoS Global Information settings are informational only:
DMAC = SMAC, Land Attack, UDP Blat, TCP Blat, POD (Ping of Death), IPv6 Min
Fragment Size, ICMP Fragment Packets, IPv4 Ping Max Packet Size, IPv6 Ping Max
Packet Size, Smurf Attack, TCP Min Header Length, TCP Syn (SPORT < 1024), Null
Scan Attack, X-Mas Scan Attack, TCP SYN-FIN Attack, TCP SYN-RST Attack and
TCP Fragment (Offset = 1).
4.7.4.2 DoS Port Settings
The DoS Port Settings page allow you to configure DoS security (enabled or
disabled) for the selected port.
To access this page, click Security > DoS Prevention > DoS Port Settings.
Figure 4.69 Security > DoS Prevention > DoS Port Settings
EKI-7428 Series User Manual
Description
Click Enabled or Disabled to define UDP Blat for the DoS Global
settings.
Click Enabled or Disabled to define TCP Blat for the DoS Global
settings.
Click Enabled or Disabled to define POD for the DoS Global settings.
Click Enabled or Disabled to define minimum fragment size for the
IPv6 protocol.
Enter the variable in bytes (0 to 65535) to set the minimum fragment
size when the function is enabled.
Click Enabled or Disabled to define the ICMP Fragments function.
Click Enabled or Disabled to set the maximum ping size for the IPv4
protocol.
Click Enabled or Disabled to set a maximum ping size for the IPv6
protocol.
Enter the variable in bytes (0 to 65535) to set the maximum ping size.
Click Enabled or Disabled to set the Smurf Attack function.
Click Enabled or Disabled to set the minimum header size.
Enter the variable in bytes (0 to 31) to set the minimum header size.
Click Enabled or Disabled to set the TCP synchronization function
(sport < 1021).
Click Enabled or Disabled to set the Null Scan Attack function.
Click Enabled or Disabled to set the X-Mas Scan function.
termination attack function.
Click Enabled or Disabled to set the TCP synchronization reset
attack function.
Click Enabled or Disabled to set the TCP fragment function (offset
=1).
Click Apply to save the values and update the screen.
76