Avaya BCM50 Rls 6.0, Руководство по выполнению задач

Страница: 23 / 26

IP Firewall
NN40011-045 Issue 1.2 BCM50 Rls 6.0 23
Attack Alert Settings
Field Default Value Description
One
Minute
Low
80 existing half-open
sessions.
This is the rate of new half-open sessions that causes
the firewall to stop deleting half-open sessions. The
BCM50 Integrated Router continues to delete half-
open sessions as necessary, until the rate of new
connection attempts drops below this number.
One
Minute
High
100 half-open
sessions per minute.
The above numbers
cause
the BCM50
Integrated Router to
start
deleting half-
open sessions when
more
than 100
session establishment
attempts have been
detected in the last
minute, and to stop
deleting
half-open
sessions when fewer
than
80 session
establishment
attempts have been
detected in the last
minute.
This is the rate of new half-open sessions that causes
the firewall to start deleting half-open sessions. When
the rate of new
connection attempts rises above this number, the
BCM50 Integrated Router deletes half-open sessions
as required to accommodate new connection attempts.
Maximum
Incomplete
Low
80 existing half-open
sessions.
This is the number of existing half-open sessions that
causes the firewall to stop deleting half-open sessions.
The BCM50 Integrated Router continues to delete half-
open requests as necessary, until the number of
existing half-open sessions drops below this number.
Maximum
Incomplete
High
100 existing half-open
sessions. The above
values causes the
BCM50e/be Integrated
Router to start
deleting half-open
sessions when the
number of existing
half-open sessions
rises above 100, and
to stop deleting half-
open sessions with
the number of
existing half-open
sessions drops below
80. This is the number of existing half-open sessions that
causes the firewall to start deleting half-open sessions.
When the number of existing half-open sessions rises
above this number, the BCM50 Integrated Router
deletes
half-open sessions as required to
accommodate new connection requests. Do not set
Maximum Incomplete High to lower than the current
Maximum I ncomplete Low number.
TCP
Maximum
Incomplete
10 existing half-open
TCP sessions.
This is the number of existing half-open TCP sessions
with the same destination host IP address that causes
the firewall to start dropping half-open sessions to that
same destination host IP address. Enter a number
between 1 and 256. As a general rule, you should
choose a smaller number for a smaller network, a
slower system or limited bandwidth.
Blocking
Period
Select this check box
to specify a number in
minutes (min) text
box.
When TCP Maximum Incomplete is reached you can
choose if the next session should be allowed or
blocked. If you check
Blocking Period any new sessions will be blocked for
the length of time you specify in the next field (min)