Efficient Networks 5100 Series manual Firewall Log, ADS Attack Detection System

Models: 5100 Series

1 129
Download 129 pages 36.15 Kb
Page 83
Image 83

SpeedStream Router User Guide

Firewall Log

When the Attack Detection System (ADS) is enabled, various checks are performed, according to the criteria you designate. For example:

1.If an attack is detected, that information can be displayed in the Firewall Log.

2.Any denials of access by the firewall can be logged with a reason code and a description string.

3.Syslog-formatted messages can be sent to another node on the LAN.

The Firewall Log contains a maximum of 200 entries; each entry may contain a maximum of 200 characters.

To display the Firewall Log window

From the main menu, click Advanced Setup, then click Firewall, and then click Log. The Firewall Log window displays.

ADS (Attack Detection System)

The firewall Advanced Attack Detection System (ADS) contains various algorithms to detect and identify WAN attacks the moment they start and protect the LAN from such attacks. Though WAN access may be temporarily hindered, the LAN is protected from harmful traffic.

ADS typically looks for two types of packets: malformed packets and spoofed source address packets.

Malformed packets have been purposefully constructed with errors in them. These are used to crash systems that do not properly handle the errors. This type of attack usually happens against large sites rather than home users.

73

Page 83
Image 83
Efficient Networks 5100 Series manual ADS Attack Detection System, To display the Firewall Log window