Chapter 15 Firewall

The following table describes the labels in this screen.

Table 71 Security > Firewall > DoS > Advanced

LABEL

DESCRIPTION

TCP SYN-Request

This is the rate of new TCP half-open sessions per second that causes the firewall to

Count

start deleting half-open sessions. When the rate of new connection attempts rises

 

above this number, the AMG1312-T Series deletes half-open sessions as required to

 

accommodate new connection attempts.

 

 

UDP Packet Count

This is the rate of new UDP half-open sessions per second that causes the firewall to

 

start deleting half-open sessions. When the rate of new connection attempts rises

 

above this number, the AMG1312-T Series deletes half-open sessions as required to

 

accommodate new connection attempts.

 

 

ICMP Echo-Request

This is the rate of new ICMP Echo-Request half-open sessions per second that causes

Count

the firewall to start deleting half-open sessions. When the rate of new connection

 

attempts rises above this number, the AMG1312-T Series deletes half-open sessions

 

as required to accommodate new connection attempts.

 

 

Back

Click this button to return to the previous screen.

 

 

Apply

Click this to save your changes.

 

 

Cancel

Click this to restore your previously saved settings.

 

 

15.6 Firewall Technical Reference

This section provides some technical background information about the topics covered in this chapter.

15.6.1 Firewall Rules Overview

Your customized rules take precedence and override the AMG1312-T Series’s default settings. The AMG1312-T Series checks the source IP address, destination IP address and IP protocol type of network traffic against the firewall rules (in the order you list them). When the traffic matches a rule, the AMG1312-T Series takes the action specified in the rule.

Firewall rules are grouped based on the direction of travel of packets to which they apply:

•

LAN to Router

•

WAN to LAN

•

LAN to WAN

•

WAN to Router

Note: The LAN includes both the LAN port and the WLAN.

By default, the AMG1312-T Series’s stateful packet inspection allows packets traveling in the following directions:

•LAN to Router

These rules specify which computers on the LAN can manage the AMG1312-T Series (remote management).

Note: You can also configure the remote management settings to allow only a specific computer to manage the AMG1312-T Series.

 

181

AMG1312-T Series User’s Guide