NETGEAR ProSafe SRX5308 Reference Manual page 107

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Figure 56.
2. Enter the settings as explained in the following table:
Table 20. Attack Checks screen settings
Setting
WAN Security Checks
Respond to Ping on
Internet Ports
Enable Stealth Mode Select the Enable Stealth Mode check box (which is the default setting) to prevent
Block TCP flood
Description
Select the Respond to Ping on Internet Ports check box to enable the VPN
firewall to respond to a ping from the Internet. A ping can be used as a diagnostic
tool. Keep this check box cleared unless you have a specific reason to enable the
VPN firewall to respond to a ping from the Internet.
the VPN firewall from responding to port scans from the WAN, thus making it less
susceptible to discovery and attacks.
Select the Block TCP flood check box to enable the VPN firewall to drop all invalid
TCP packets and to protect the VPN firewall from a SYN flood attack.
A SYN flood is a form of denial of service attack in which an attacker sends a
succession of SYN (synchronize) requests to a target system. When the system
responds, the attacker does not complete the connections, thus leaving the
connection half-open and flooding the server with SYN messages. No legitimate
connections can then be made. By default, the Block TCP flood check box is
cleared.
Firewall Protection
107