Network Hardening (Protecting Against Dos Attacks) - EdgeWave iPrism Web Security Administration Manual

iPrism

Network Hardening (Protecting Against DoS Attacks)

A DoS (Denial of Service) attack occurs when a malicious person tries to shut down a network by
flooding it with network traffic. Usually the traffic is designed to use the maximum amount of system
resources; e.g., initiating a connection but not finishing the process. (This consumes the memory
needed to hold the information on the half-open connection.)
To enable DoS protection:
From the iPrism home page, select System Settings, then Network Services.
1.
In the Network Hardening frame, check Enable Denial of Service Protection. The iPrism will
2.
now detect DoS attacks and limit the resources that a malicious machine can consume on the
system.
Enabling SNMP
The Simple Network Management Protocol (SNMP) is used with iPrism to monitor iPrism
appliance(s) for conditions that warrant the iPrism administrator's attention. iPrism SNMP is
available on the standard SNMP port of 161.
If you want to monitor iPrism using SNMP, you can use a standard MIB-2 file with any MIB browser.
For example, a free MIB browser is available at www.ireasoning.com/mibbrowser.shtml (no
endorsement implied); this browser offers a large number of sample MIB files (including a few MIB-2
files). Once in the iPrism, a list of available SNMP Object Identifiers (OIDs) will be displayed.
The SNMP Community String
An SNMP community string consists of four (4) or more alphanumeric characters and functions
much like a password, permitting access to the SNMP protocol.
To enable SNMP:
From the iPrism home page, select select System Settings, then Network Services.
1.
In the SNMP frame, check SNMP.
2.
Chapter 7 System Settings
Figure 84. Enable DoS Protection
Administration Guide
126