SMC Networks SMCWBR14T-G manual High

		SECURITY
Parameter	Defaults	Description
Password		Enter your email account password.
Connection Policy
Fragmentation	10 secs	Configures the number of seconds that a packet
half-open wait		state structure remains active. When the timeout
		value expires, the router drops the unassembled
		packet, freeing that structure for use by another
		packet.
TCP SYN wait	30 secs	Defines how long the software will wait for a TCP
		session to reach an established state before
		dropping the session.
TCP FIN wait	5 secs	Specifies how long a TCP session will be managed
		after the firewall detects a FIN-exchange.
TCP connection	3600 secs	The length of time for which a TCP session will be
idle timeout	(1 hour)	managed if there is no activity.
UDP session idle	30 secs	The length of time for which a UDP session will
timeout		be managed if there is no activity.
DoS Detect Criteria
Total incomplete	300	Defines the rate of new unestablished sessions that
TCP/UDP	sessions	will cause the software to start deleting half-open
sessions HIGH		sessions.
Total incomplete	250	Defines the rate of new unestablished sessions that
TCP/UDP	sessions	will cause the software to stop deleting half-open
sessions LOW		sessions.
Incomplete	250	Maximum number of allowed incomplete
TCP/UDP	sessions	TCP/UDP sessions per minute.
sessions (per min.)
HIGH
Incomplete	200	Minimum number of allowed incomplete
TCP/UDP	sessions	TCP/UDP sessions per minute.
sessions (per min.)
LOW
Maximum	10	Maximum number of incomplete TCP/UDP
incomplete	sessions	sessions from the same host.
TCP/UDP
sessions number
from same host

4-39