ZyXEL Communications 2602H Series manual 202

Prestige 2602H/HW Series User’s Guide

Table 61 Firewall: Threshold (continued)

LABEL	DESCRIPTION	DEFAULT VALUES
Maximum	This is the number of existing half-open	100 existing half-open sessions.
Incomplete High	sessions that causes the firewall to start	The above values causes the
	deleting half-open sessions. When the	Prestige to start deleting half-open
	number of existing half-open sessions rises	sessions when the number of
	above this number, the Prestige deletes half-	existing half-open sessions rises
	open sessions as required to accommodate	above 100, and to stop deleting
	new connection requests. Do not set	half-open sessions with the
	Maximum Incomplete High to lower than the	number of existing half-open
	current Maximum Incomplete Low number.	sessions drops below 80.
TCP Maximum	This is the number of existing half-open TCP	30 existing half-open TCP
Incomplete	sessions with the same destination host IP	sessions.
	address that causes the firewall to start
	dropping half-open sessions to that same
	destination host IP address. Enter a number
	between 1 and 256. As a general rule, you
	should choose a smaller number for a smaller
	network, a slower system or limited
	bandwidth.
Action taken when
the TCP Maximum
Incomplete
threshold is
reached.
Delete the oldest	Select this radio button to clear the oldest half
half open session	open session when a new connection request
when new	comes.
connection
request comes
Deny new	Select this radio button and specify for how
connection	long the Prestige should block new
request for	connection requests when TCP Maximum
	Incomplete is reached.
	Enter the length of blocking time in minutes
	(between 1 and 255).
Back	Click Back to return to the previous screen.
Apply	Click Apply to save your changes back to the Prestige.
Cancel	Click Cancel to begin configuring this screen afresh.

202 Chapter 14 Firewall Configuration