4IPNET HSG800, Руководство пользователя

Страница: 100 / 108

User’s Manual
OWL800 / OWL2000 / HSG800
ENGLISH
© 2008 4IPNET, INC.
91
Appendix A. Session Limit and Session Log
ƒ
Session Limit
To prevent ill-behaved clients or malicious software from using up system’s connection resources, administrators will
have to restrict the number of concurrent sessions that a client can establish.
¾
The maximum number of concurrent sessions (TCP and UDP) for each user can be specified in the policy
setting, which can be chosen to apply to all users including authenticated users, users on
non-authenticated ports, privileged users, and clients in virtual server and DMZ zones.
¾
When the number of a user’s sessions reaches the session limit (a choice of Unlimited, 10, 25, 50, 100,
200, 350, and 500), the user will be implicitly suspended upon receipt of any new connection request. In
this case, a record will be logged to the SYSLOG server specified in the Policy Configuration .
¾
Since this basic protection mechanism may not be able to protect the system from all malicious DoS
attacks, it is strongly recommended to build some immune capabilities (such as IDS or IPS solutions) in the
network deployment to protect the network in daily operation.
ƒ
Session Log
The system can record connection details of each client while accessing the Internet. In addition, the log data can be
sent out to a specified SYSLOG Server, Email Box or FTP Server based on pre-defined time interval.