Philips CPWBS154 manual DoS Criteria and Port Scan Criteria

Models: CPWBS154

1 74
Download 74 pages 415 b
Page 51
Image 51

ENGLISH 51

DoS Criteria and Port Scan Criteria

Set up DoS and port scan criteria in the spaces provided (as shown below).

 

Parametre

Defaults

Description

 

 

Total incomplete

300

Defines the rate of new unestablished sessions that will cause the

 

TCP/UDP sessions

sessions

software to start deleting half-open sessions.

 

HIGH

 

 

 

 

Total incomplete

250

Defines the rate of new unestablished sessions that will cause the

 

TCP/UDP sessions

sessions

software to stop deleting halfopen sessions.

 

LOW

 

 

 

 

Incomplete

250

Maximum number of allowed incomplete TCP/UDP sessions

 

TCP/UDP sessions

sessions

per minute.

 

(per min) HIGH

 

 

 

 

Incomplete

200

Minimum number of allowed incomplete TCP/UDP sessions

 

TCP/UDP sessions

sessions

per minute.

 

(per min) LOW

 

 

 

 

Max. incomplete TCP/

10

Maximum number of incomplete TCP/UDP sessions

 

UDP sessions number

 

from the same host.

 

from same host

 

 

 

 

Incomplete TCP/

300

Length of time before an incomplete TCP/UDP session is detected

 

UDP sessions detect

msec

as incomplete.

 

sensitive time period

 

 

 

 

Maximum half-open

30

Maximum number of half-open fragmentation packets from

 

fragmentation packet

 

the same host.

 

number from same

 

 

 

 

host

 

 

 

 

Half-open

10000

Length of time before a half-open fragmentation session is

 

fragmentation detect

msec

detected as half-open.

 

sensitive time period

 

 

 

 

Flooding cracker

300 sec

Length of time from detecting a flood attack to blocking the attack.

 

block time

 

 

 

 

 

 

 

 

Note: The firewall does not significantly affect system performance, so we advise enabling the prevention features to protect your network.

Page 51
Image 51
Philips CPWBS154 manual DoS Criteria and Port Scan Criteria