When the Installation Wizard appears
Installation Guide
63
malicious purposes and program them to simultaneously assault a
network with information requests. If allowed to pass through, they
can overwhelm and crash your servers.
Per Server Quota
This option allows you to safeguard your servers
from coordinated denial-of-service attacks from
any client to any single server. After clicking this
checkbox, enter a threshold number in the text
field that represents the maximum request
capacity (per second) of that server. If there are
more than the specified number of connection
requests within a second, the Firebox Vclass
appliance will drop the excess requests within that
same second. This will protect your server from
being overwhelmed by too many connection
requests in a short period of time.
Per Client Quota
Use this option to restrict the number of
connection requests from a single client within a
second. After clicking this checkbox, enter a
threshold number in the text field that represents
the maximum number of requests (per second)
from a single client. If there are more than the
specified number of connection requests within a
second, the Firebox Vclass appliance will drop the
excess requests within that same second.
For a brief overview of the
Distributed Denial-of-service
options, click
How does this work?
. This will open an online help window
displaying additional information about these options and their
effects.
16 When you have finished establishing the preferred levels of hacker
defense, click
OK
to close this dialog box.
17 When you are finished with the Policy tab,
c
lick
Next.
1install_guide.book Page 63 Friday, June 7, 2002 1:10 PM