Defining Dos Prevention; Dos Global Settings - Cisco SGE2000 - - Gigabit Switch Administration Manual

Configuring Device Security

Defining DoS Prevention

STEP 4
Defining DoS Prevention
Cisco Small Business SFE/SGE Managed Switches Administration Guide
Click Apply. The ACL binding is defined, and the device is updated.
Denial of Service
(DOS) increases network security by preventing packets with
invalid IP addresses from entering the network. DoS eliminates packets from
malicious networks which can compromise a network's stability.
The device provides a Security Suite that allows administrators to match, discard,
and redirect packets based on packet header values. Packets which are
redirected are analyzed for viruses and Trojans.
DoS enables network managers to:
•
Deny packets that contain reserved IP addresses
•
Prevent TCP connections from a specific interface
•
Discard echo requests from a specific interface
•
Discard IP fragmented packets from a specific interface
The DoS Prevention section contains the following topics:
•

DoS Global Settings

•
Defining Martian Addresses
DoS Global Settings
Global Settings Page
The
DoS attack prevention parameters on the device. To open the
Page
:
allows network managers to enable and define global
4
Global Settings
123