Fortinet 548B 7.13.2.16 dos-control tcpoffset , 7.13.2.17 dos-control all

- 309 -
Syntax
dos-control tcpsynfin
no dos-control tcpsynfin
no - This command disab les the TCP SYN & FIN Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
7.13.2.16 dos-control tcpoffset
This command enables the TCP Fragment Offset Denial of Service protection. If the mode is enabled,
Denial of Service prevention is active fo r this type of attack. If pa ckets ingress having TCP Heade r Offset
equal to one (1), the packets will be drop ped if the mode is enabled.
Syntax
dos-control tcpoffset
no dos-control tcpoffset
no - This command disables the TCP Fragment Offset Denial of Service protection.
Default Setting
Disabled
Command Mode
Global Config
7.13.2.17 dos-control all
This command enables the Denial of Service protection checks glob ally.
Syntax
dos-control all
no dos-control all
no - This command disables the Denial of Service protection checks globally.