ZyXEL Communications AMG1302-T11C, Руководство пользователя, Страница: 174 / 307

Chapter 15 Firewall
AMG1302-T11C User’s Guide
174
The following table describes the labels in this screen.
15.5 The DoS Screen
Use this screen to enable DoS protection. Click Security > Firewall > Dos to display the following
screen.
Figure 88
Security > Firewall > Dos
The following table describes the labels in this screen.
15.5.1 The DoS Advanced Screen
For DoS attacks, the AMG1302-T11C uses thresholds to determine when to start dropping sessions
that do not become fully established (half-open sessions). These thresholds apply globally to all
sessions.
For TCP, half-open means that the session has not reached the established state-the TCP three-way
handshake has not yet been completed. Under normal circumstances, the application that initiates
Table 66
Security > Firewall > Rules: Edit: Edit Customized Services: Add/Edit
LABEL DESCRIPTION
Config
Service Name Type a unique name for your custom port.
Service Type Choose the IP port ( TCP or UDP ) that defines your customized port from the drop down list
box.
Port Configuration
Type Click Single to specify one port only or Port Range to specify a span of ports that define
your customized service.
Port Number Type a single port number or the range of port numbers that define your customized
service.
Apply Click this to save your changes.
Cancel Click this to to exit this screen without saving.
Table 67
Security > Firewall > Dos
LABEL DESCRIPTION
Denial of Services Enable this to protect against DoS attacks. The AMG1302-T11C will drop sessions that
surpass maximum thresholds.
Apply Click this to save your changes.
Cancel Click this to restore your previously saved settings.
Advanced Click this to go to a screen to specify maximum thresholds at which the AMG1302-T11C
will start dropping sessions.