Fibrain FSR-R2, Руководство пользователя

Страница: 69 / 132

Fibrain FSR-R2 User’s Manual
69
19
Security - Firewall Setting
This page allows you to change the setting for WPS (Wi-Fi
Protected Setup). Using this feature could let your wireless
client automatically syncronize its setting and connect to the
Access Point in a minute without any hassle.
From the Security menu, click on Firewall. The following page is
displayed:
Field Description
SPI Firewall
Protection Select Enable to enable SPI Firewall Protection. Select Disable to
disable SPI Firewall Protection.
TCP SYN DoS
Protection Check to enable TCP SYN DoS Protection.
Uncheck to disable TCP SYN DoS Protection.
TCP SYN DoS attack sends a flood of TCP/SYN packets. Each of these
packets are like a connection request, causing the server to consume
computing resources (e.g. memory, CPU) to reply and to continuously
wait for the incoming packets. Without TCP SYN Dos Protection, the
resources in the server will be easily consumed completely. This will
then consequently result in the dysfunction of the server.
The device is able to detect TCP SYN DoS attacks and limits the
resource consumption by lowering the incoming request rate by fast
recycling the resource. Therefore, The device is still able to serve
normal traffic while it is under such an attack.
ICMP
Broadcasting
Protection Check to enable ICMP Broadcasting Protection.
Uncheck to disable ICMP Broadcasting Protection.
ICMP broadcasting attack is a type of DoS attacks. A flood of ICMP
broadcasting packets is generated and sent to a server (like AXIMCom
Mobile Router). Consequently, this server will suffer from a huge
amount of interruptions and consumption of computing resources.