Sapido Gr-1100, User Manual

Page: 75 / 294

75
1. Firewall Protection Level
Select the level from the drop-down list, including High, Medium and Low. The below
screen including SPI service and ICMP setting will change according to your level
setup.
2. Enable SPI Service
The GR-1100 often monitor a wider range of activity, such as patterns of traffic and the
type of application sending traffic. With SPI, the router looks at individual packets for
patterns similar to known hacker techniques, such as Denial of Service (DoS) attacks,
Ping of Death (illegal ping packet sizes or excessive ICMP messages), SYN Flood, LAND
Attack, and IP Spoofing. Enable it if you need.
3. Blocking ICMP Ping from WAN Side
The purpose of ICMP is to provide feedback regarding the network and datagram, it is not
to make IP a reliable transport mechanism. ICMP messages use a basic IP datagram
header with the IP data being the ICMP message. The IP source address is that of the
host or gateway sending the ICMP message with the destination IP address being that of
the original source IP address. You can enable ICMP Ping from WAN side or not.
4. DoS Attacks Blocking Settings
4.1 Enable DoS Attacks Blocking