Table of Contents
Advertisement
C
ONFIGURING THE
•
DoS Criteria and Port Scan Criteria
Set up DoS and port scan criteria in the spaces provided (as shown below).
Parameter
Total incomplete
TCP/UDP sessions
HIGH
Total incomplete
TCP/UDP sessions
LOW
Incomplete
TCP/UDP sessions
(per min) HIGH
Incomplete
TCP/UDP sessions
(per min) LOW
Maximum incomplete
TCP/UDP sessions
number from same
host
Incomplete
TCP/UDP sessions
detect sensitive time
period
Maximum half-open
fragmentation packet
number from same
host
Half-open
fragmentation detect
sensitive time period
Flooding cracker
block time
Note: The firewall does not significantly affect system performance, so
we advise enabling the prevention features to protect your
network.
4-58
B
ARRICADE
Defaults
300
sessions
250
sessions
250
sessions
200
sessions
10
300
msec
30
10000
msec
300
second
Description
Defines the rate of new unestablished sessions
that will cause the software to start deleting
half-open sessions.
Defines the rate of new unestablished sessions
that will cause the software to stop deleting half-
open sessions.
Maximum number of allowed incomplete
TCP/UDP sessions per minute.
Minimum number of allowed incomplete
TCP/UDP sessions per minute.
Maximum number of incomplete TCP/UDP
sessions from the same host.
Length of time before an incomplete
TCP/UDP session is detected as incomplete.
Maximum number of half-open fragmentation
packets from the same host.
Length of time before a half-open
fragmentation session is detected as half-open.
Length of time from detecting a flood attack to
blocking the attack.
Advertisement
Table of Contents
