Watchguard V10 User Manual page 85

IP Source Route
Distributed denial of service options
As a subset of Denial of Service attacks, Distributed
DoS (DDoS) attacks occur when hackers coordinate a
number of compromised computers for malicious
purposes and program them to simultaneously assault
a network with information requests. If this type of
attack is allowed to pass through, your servers can be
overwhelmed, causing them to crash.
Per Server Quota
Per Client Quota
For a brief overview of the distributed denial-of-service
options, click How does this work? An online Help win-
dow displays more information about these options.
Firebox Vclass User Guide
Running the Vcontroller Installation Wizard
Protects against a flood of false client IP addresses,
designed to bypass firewall security.
Safeguards your servers against attacks from any
client to any single server. Select this checkbox,
then type the threshold number in the text field.
The number here represents the maximum request
capacity per second of the server. If more than the
specified number of connection requests are
received, the Firebox Vclass appliance drops the
excess requests.
Restricts the number of connection requests from a
single client in one second. Select this checkbox,
then type the threshold number in the appropriate
text field. This number represents the maximum
number of requests per second from a single client.
If more than the specified number of connection
requests are received, the Firebox Vclass appliance
drops the excess requests.
53