78
| XSERIES G5 | 2106026MNAA
Figure 9-1: Totalflow/TCP application instance with non-default TCP port
IMPORTANT NOTE:
TCP port numbers from 0 to 1023 are universally reserved for well-known
ports and should never be used.
Protection of ports used for TCP/IP communication such as Ethernet, is very important. Several
cybersecurity threats can make a device unavailable for connection.
If the Totalflow devices suffers a Denial of Service (DOS) attack, the device cannot grant requests for
connection and stops responding. The following table provides the DOS threshold rates per packet
type at which the device stops responding.
Table 9-5: Denial of Service (DOS) threshold rates
Packet type
Description
Ethernet
5 Mbps (7440 packets/sec)
ARP
2 Mbps (2976 packets/sec)
IP
3 Mbps (4464 packets/sec)
ICMP
4 Mbps (5952 packets/sec)
UDP
3 Mbps (4464 packets/sec)
TCP
1 Mbps (1488 packets/sec)
The following table describes recommended guidelines to secure access to the XSeries
G5
devices.
Procedures for secure configuration are included throughout this manual, quick start guides and online
PCCU help files.
Table 9-6: XSeries
G5
security guidelines
Recommendation
Description
Secure physical access
to the device
Access to the device, its internal components, and connected
peripherals, should be controlled.
Summary of Contents for XRC G5
Page 25: ...2106026MNAA XSERIESG5 25 ...
