Configuring Mac Filtering To Allow Or Block Traffic - Cisco Small Business Pro SA 520W Administration Manual

Firewall Configuration
Using Other Tools to Prevent Attacks, Restrict Access, and Control Inbound Traffic
STEP 5
STEP 6
STEP 1
Cisco SA 500 Series Security Appliances Administration Guide
• Block Multicast Packets: Check this box to block multicast packets.
In the DoS Attacks area, enter the following information:
• SYN Flood Detect Rate (max/sec): Enter the maximum number of SYN
packets per second that will cause the security appliance to determine that
a SYN Flood Intrusion is occurring. This value can range between 1 and
10,000 packets per second. The default is 128 SYN packets per second.
• Echo Storm (ping pkts/sec): Enter the number of pings per second that will
cause the security appliance to determine that an echo storm intrusion event
is occurring. Echo storm intrusion events are not blacklisted. This value can
range between 1 and 10,000 ping packets per second. The default is 15
ping packets per second.
• ICMP Flood [ICMP pkts./sec]: Enter the number of ICMP packets per
second, not including PING packets, that will cause the security appliance to
determine that an ICMP flood intrusion event is occurring. ICMP flood events
are not blacklisted. This value can range between 1 and 10,000 ICMP
packets per second. The default is 100 ICMP packets per second.
Click Apply to save your settings, or click Reset to revert to the saved settings.

Configuring MAC Filtering to Allow or Block Traffic

You can restrict (block or allow) traffic to the WAN and DMZ from the LAN based
on the MAC address of the device. The first step is to populate the list of MAC
addresses to be covered by the filtering policy. You can configure the policy either
to block all MAC addresses in the list and permit the rest, or to permit only the
configured MAC addresses and block the rest.
Click Firewall on the menu bar, and then click MAC Filtering > MAC Filtering in the
navigation tree.
The Source MAC Filter page appears.
Before you can add any addresses to the table, you must check the box to enable
MAC filtering, and then click Apply.
5
134