Denial Of Service Configuration - Ubiquiti EdgeSwitch ES-24-250W Administration Manual

EdgeSwitch Administration Guide
™

Denial of Service Configuration

Use the Denial of Service Configuration page to configure Denial of Service (DoS) control. The EdgeSwitch
software provides support for classifying and blocking specific types of DoS attacks. You can configure your
system to monitor and block the types of attacks listed in the table below.
To access the Denial of Service Configuration page, click System > Advanced Configuration > Protection >
Denial of Service in the navigation menu.
Field
TCP Settings – These options help prevent the device and the network from attacks that exploit the TCP header size or the information
in the TCP or UDP headers of packets that the device receives.
First Fragment
TCP Port
UDP Port
SIP=DIP
Ubiquiti Networks, Inc.
Denial of Service Configuration
Denial of Service Configuration Fields
Description
When selected, this option allows the device to drop packets that have a TCP header smaller than the
value configured in the Min TCP Hdr Size field.
When selected, this option allows the device to drop packets that have the TCP source port equal to
the TCP destination port.
When selected, this option allows the device to drop packets that have the UDP source port equal to
the UDP destination port.
When selected, this option allows the device to drop packets that have a source IP address equal to
the destination IP address.
Configuring System Information
49