NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 117

Figure 4-16
3. Enter the settings as explained in
Table 4-4. Attack Checks Settings
Setting
WAN Security Checks
Respond to Ping on
Internet Ports
Enable Stealth Mode Select the Enable Stealth Mode check box (which is the default setting) to
Block TCP flood
Firewall Protection
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Table
Description (or Subfield and Description)
Select the Respond to Ping on Internet Ports check box to enable the VPN
firewall to respond to a ping from the Internet. A ping can be used as a
diagnostic tool. Keep this check box cleared unless you have a specific reason
to enable the VPN firewall to respond to a ping from the Internet.
prevent the VPN firewall from responding to port scans from the WAN, thus
making it less susceptible to discovery and attacks.
Select the Block TCP flood check box to enable the VPN firewall to drop all
invalid TCP packets and to protect the VPN firewall from a SYN flood attack.
A SYN flood is a form of denial of service attack in which an attacker sends a
succession of SYN (synchronize) requests to a target system. When the system
responds, the attacker does not complete the connections, thus leaving the
connection half-open and flooding the server with SYN messages. No legitimate
connections can then be made. By default, the Block TCP flood check box is
cleared.
v1.0, April 2010
4-4.
4-27