Firewall-Stateful Packet Inspection; Firewall-Dos Protection - Panasonic KX-NS1000 Installation Manual

8.6.13 Firewall—DoS Protection
Protocol number
Originating IP address
Destination IP address
TCP/UDP originating port
TCP/UDP destination port
Direction
Operation
Log
PC Programming Manual References
27.8 Router Configuration—Firewall—[2-2] Packet Filtering
8.6.12 Firewall—Stateful Packet Inspection
Description
Stateful Packet Inspection (SPI) is a feature where the firewall inspects the contents of a packet and determines
dynamically whether to allow or deny the packet. If SPI is enabled, packets determined to be
"INVALID" (packets that do not apply to any other state) are denied. On this PBX, SPI applies to both incoming
(WAN ® LAN) and outgoing (LAN ® WAN).
Using the following "TCP flag state" as the detection criteria, packets that do not match the TCP state change
are discarded by the SPI feature.
This feature remembers each transmission state, and by predicting the next packet that will arrive, it can detect
unauthorised access and discard packets accordingly.
PC Programming Manual References
27.7 Router Configuration—Firewall—[2-1] One Touch Security
8.6.13 Firewall—DoS Protection
Description
The DoS Protection feature protects the system against DoS (Denial of Service) attacks. Security rules for
protecting against port scans and DoS attacks can be set with one touch.
You can enable and disable DoS Protection.
Conditions
•
For details about whether the DoS Protection feature is necessary, consult the network administrator.
356 Installation Manual
Setting
Specify a protocol number directly (0–255)
Specify a protocol type (ICMP, TCP, UDP, TCP&UDP)
By specifying a subnet, you can apply the filter to a range of
addresses.
By specifying a subnet, you can apply the filter to a range of
addresses.
You can specify a range.
You can specify a range.
LAN->WAN, WAN->LAN
Allow/Deny
Record in log or do not record in log
Description