HP 100 Router manual DoS Detect Criteria

Models: 100 Router

1 130
Download 130 pages 40.72 Kb
Page 54
Image 54

54CHAPTER 5: ROUTER CONFIGURATION

DoS Detect Criteria

15In the Total incomplete TCP/UDP sessions HIGH text box, enter the number of unestablished sessions that will cause the software to start deleting half-open sessions. The defaiult is 300.

16In the Total incomplete TCP/UDP sessions LOW text box, enter the number of unestablished sessions that must be reached before the software stops deleting half-open sessions. The default is 250.

17In the Incomplete TCP/UDP sessions (per min) HIGH text box, enter the maximum number of incomplete TCP/UDP sessions allowed per minute. The default is 250 sessions.

18In the Incomplete TCP/UDP sessions (per min) LOW text box, enter the minimum number of incomplete TCP/UDP sessions allowed per minute. The default is 200 sessions.

19In the Maximum incomplete TCP/UDP sessions number from the same host text box, enter the maximum number of incomplete sessions allowed from the same host. The default is 10 sessions.

20In the Incomplete TCP/UDP sessions detect sensitive time period text box, enter the length of time that msut elapse before an incomplete TCP/UDP session is detected as incomplete. The default is 300 msec.

21In the Maximum half-open fragmentation packet number from the same host text box, enter the maximum number of half-open fragmentation packets allowed from the same host. The default is 30 packets.

22In the Half-open fragmentation detect sensitive time period text box, enter the length of time that must elapse before a half-open fragmentation session is detected as half-open. The default is 10000 msec.

23In the Flooding cracker block time text box, enter the length of time that must elapse between detection of a flood attack and blocking the attack. The default is 300 seconds.

24Click Apply to save the settings.

Special Applications Special Applications let you choose specific ports, and for these ports to choose the specific applications that you want to work with the Network Address Translation (NAT) feature of the Router. You can either choose from a list of applications, or configure another application using information supplied by the application vendor.

Page 54
Image 54
HP 100 Router manual DoS Detect Criteria