4IPNET HSG320, Руководство пользователя

Страница: 77 / 194

User’s Manual
HSG Wireless Hotspot Gateway ENGLISH
72
6.3.5 User Privilege
Administrator can choose to allow users to change their Password. And to prevent ill-behaved clients or malicious
software from taking up
the system’s connection resources, the administrator can restrict the number of concurrent
sessions that a user can establish.

The maximum number of concurrent sessions including TCP and UDP for each user can be specified in
the Global policy, which applies to authenticated users, users on a non-authenticated port, privileged
users, and clients in DMZ zones. Also, this can be specified in the other policies to apply to the
authenticated users.
 When the number of a user’s sessions reach the session limit (a choice of Unlimited, 10, 25, 50, 100, 200,
350, 500, 750 and 1000), the user will be implicitly suspended upon receipt of any new connection
request. In this case, a record will be logged to a SYSLOG server.
Since this basic protection mechanism may not be able to protect the system from all malicious DoS attacks, it is
strongly recommended to build some immune capabilities (such as IDS or IPS solutions) in network deployment to
maintain network operation.