Doro IP500PBXW, Руководство пользователя

Страница: 113 / 166

Administration Manual ip500pbxw – English
112
Scan Detection
Threshold If the number of scanning packets counted within the Scan
Detection Period exceeds the value set here, a port scan
attack is detected. The default setting is 5 per second.
Scan Detection Period The duration that scanning type traffic is counted for. The
default setting is 60 seconds.
Port Flood Detection
Threshold This is the maximum number of SYN packets that can be
received by a single port before a flood is detected. The
default setting is 10 per second.
Host Flood Detection
Threshold This is the maximum number of SYN packets that can be
received from a host before a flood is detected. The default
setting is 20 per second.
Flood Detection Period If the number of SYN floods counted within this duration
exceeds either the Port Flood Detection Threshold or the
Host Flood Detection Threshold, traffic from the attacker is
blocked for the DOS Attack Block Duration. The default
setting is 10 seconds.
Maximum TCP Open
Handshaking Count This is the maximum number (per second) of unfinished
TCP handshaking sessions that are allowed before a DOS
attack is detected. The default setting is 5 per second.
Maximum Ping Count This is the maximum number of Pings (per second) that are
allowed before a DOS attack is detected.
Maximum ICMP Count This is the maximum number of ICMP ins (per second) that
are allowed before a DOS attack is detected.
Select
Clear Blacklist
if you wish to clear all external hosts from the blacklist.
Select
Apply
Save Configuration
Restart the ip500pbxw
Security Logging
Select ‘Configure Security Logging …’
The following page is displayed
Logging is enabled by default for Session Logging, Blocking Logging and Intrusion Logging.
To disable all logging: