49
Configuring System Information
EdgeSwitch
™
Administration Guide
Ubiquiti Networks, Inc.
Denial of Service Configuration
Use the
Denial of Service Configuration
page to configure Denial of Service (DoS) control. The EdgeSwitch
software provides support for classifying and blocking specific types of DoS attacks. You can configure your
system to monitor and block the types of attacks listed in the table below.
To access the
Denial of Service Configuration
page, click
System
>
Advanced Configuration
>
Protection
>
Denial of Service
in the navigation menu.
Denial of Service Configuration
Denial of Service Configuration Fields
Field
Description
TCP Settings
– These options help prevent the device and the network from attacks that exploit the TCP header size or the information
in the TCP or UDP headers of packets that the device receives.
First Fragment
When selected, this option allows the device to drop packets that have a TCP header smaller than the
value configured in the Min TCP Hdr Size field.
TCP Port
When selected, this option allows the device to drop packets that have the TCP source port equal to
the TCP destination port.
UDP Port
When selected, this option allows the device to drop packets that have the UDP source port equal to
the UDP destination port.
SIP=DIP
When selected, this option allows the device to drop packets that have a source IP address equal to
the destination IP address.
