
72
C
HAPTER
8: C
ONFIGURING
FOR
L
OAD
B
ALANCING
Modifying Security
Filters (Attack
Mitigation)
The Server Load Balancer provides Attack Mitigation features that help to
prevent Denial of Service and Distributed Denial of Service attacks.
When enabled, the attack mitigation features cause the Server Load
Balancer to recognize and filter out security attacks. Table 12 describes
the available filters and their descriptions.
Modifying Security
Filters
To modify the security filters, complete the following steps:
1
Click
Device View
on the Toolbar.
2
Select
Security > Attack Filters
.
3
Click
Modify
. The
Modify Attack Filters
page appears.
4
Select the attack filters you wish to enable and click
OK
.
Table 12
Filters and Descriptions
Filter
Description
Smurf Filter
Filter ICMP packets sent to broadcast or multicast
addresses and unsolicited ICMP ECHO replies
FTP Restricted Port Filter
Filter out a range of FTP data port requests.
IP Source Route Filter
Filter packets which contain the IP source route option.
LAND Attack
Filter packets which have matching destination and
source IP addresses.
Fraggle Attack Filter
Filter UDP ECHO requests sent to a broadcast or
multicast address and unsolicited UDP packets from
the UDP ECHO port.
FTP Bounce Filter
Filter FTP traffic when the port command issued
contains an address that differs from the requesting
host.
IP Options Filter
Filter packets that contain any IP options (for example,
Record Route and Time Stamp) in the packet header.
You can filter packets which have packet headers
containing only the Strict Source Route and Loose
Source Route IP options using the IP Source Route filter
slb_gsg.bk Page 72 Thursday, May 31, 2001 8:57 AM
Summary of Contents for 3C16120 - SuperStack 3 Server Load Balancer
Page 10: ...10 ABOUT THIS GUIDE slb_gsg bk Page 10 Thursday May 31 2001 8 57 AM ...
Page 40: ...40 CHAPTER 4 WORKING WITH THE WEB INTERFACE slb_gsg bk Page 40 Thursday May 31 2001 8 57 AM ...
Page 74: ...74 CHAPTER 8 CONFIGURING FOR LOAD BALANCING slb_gsg bk Page 74 Thursday May 31 2001 8 57 AM ...
Page 82: ...82 APPENDIX A SAFETY INFORMATION slb_gsg bk Page 82 Thursday May 31 2001 8 57 AM ...
Page 90: ...90 APPENDIX C TECHNICAL SUPPORT slb_gsg bk Page 90 Thursday May 31 2001 8 57 AM ...
Page 94: ...94 INDEX slb_gsg bk Page 94 Thursday May 31 2001 8 57 AM ...