Firewall Log; Ads (Attack Detection System) - Efficient Networks SpeedStream 5100 Series User Manual

Firewall Log

When the Attack Detection System (ADS) is enabled, various checks are performed, according to the
criteria you designate. For example:
1. If an attack is detected, that information can be displayed in the Firewall Log.
2. Any denials of access by the firewall can be logged with a reason code and a description string.
3. Syslog-formatted messages can be sent to another node on the LAN.
The Firewall Log contains a maximum of 200 entries; each entry may contain a maximum of 200
characters.
To display the Firewall Log window
• From the main menu, click Advanced Setup, then click Firewall, and then click Log.
The Firewall Log window displays.

ADS (Attack Detection System)

The firewall Advanced Attack Detection System (ADS) contains various algorithms to detect and identify
WAN attacks the moment they start and protect the LAN from such attacks. Though WAN access may be
temporarily hindered, the LAN is protected from harmful traffic.
ADS typically looks for two types of packets: malformed packets and spoofed source address packets.
Malformed packets have been purposefully constructed with errors in them. These are used to crash
•
systems that do not properly handle the errors. This type of attack usually happens against large sites
rather than home users.
SpeedStream Router User Guide
73