Watchguard Firebox X1000, Reference Manual

Page: 190 / 264

CHAPTER 10: Field Definitions
178 WatchGuard Firebox System
port space probes, IP options, address space probes, and SYN
flood attacks.
Block Spoofing Attacks
"Spoofing" occurs when someone alters packets to falsely identify
the originating computer to confuse or attack another computer.
The originating computer is usually misidentified as a trusted
computer within an organization. Sometimes improperly
configured computers elsewhere on the Internet send packets that
falsely identify themselves and thus appear to be spoofed.
Block IP Options
Enable this checkbox to block sites from which an IP Options
attack originates. IP options are extensions to the Internet Protocol
used primarily for testing network configurations. IP options can
also be used to pose as another computer on the Internet.
Block SYN Flood Attacks
Enable this checkbox to block SYN Flood attacks. SYN Flood
attacks are a type of Denial of Service (DoS) attack that seek to
prevent your public services, like email, from being accessible to
users on the Internet.
Block Port Space Probes
Enable this checkbox to block port space probes. Port space
probes make requests on sequential port numbers and are usually
attempts to map network port space to compromise security.
Block Address Space Probes
Enable this checkbox to block address space probes. Address
space probes make requests on sequential IP addresses and are
usually attempts to map IP address space to look for security
holes that an attacker can exploit to compromise security.
SYN Validation Timeout
Select how long (in seconds) until SYN Validation timesout.
Arrows
Use the arrows to select your preferred value.
Maximum Incomplete Connections
Select the maximum number of incomplete connections.