In this field...
Max.
Connection
s/Secon
d
from Same
Source IP
Welchia
The Welchia worm
After infecting a com
infect.
It does so by sending a specific ping packet to a target and waiting for the
reply that sig
nals that the target is alive. This flood of pings may disrupt network
connect
ivity.
Y
ou can configure how the Welchia worm should be handled.
Chapter 9: Setting Your Security Policy
Do this...
Type the maximum number of network connections allowed per seco
from the same source IP a
The default value is 100.
Set a lower threshold for stronger protection against DoS attacks.
Note: Setting thi
s value too low can lead to false alarms.
uses the MS DCOM vulnerability or a WebDAV vulnerability.
puter, the worm begins
ddress.
searching for other live computers to
Using SmartDefense
nd
235