Chapter 15 Auto Denial of Service (DoS)

Figure 50 Advanced Auto DoS Attack Prevention

The following table describes the labels in this screen.

Table 31 Advanced Auto DoS Attack Prevention

LABEL

DESCRIPTION

Global

Click this link to view the Global Auto DoS Attack Prevention screen.

 

 

Port

Select the port you want to configure or select Apply settings to all ports to

 

configure all the ports on the switch.

 

 

Denial of

Select the types of attacks you want to prevent or choose Select All to prevent all

Service

types of attacks and scans supported by the switch. See Section 15.1.1 on page 89

Prevention

for more information on specific types of attacks.

 

 

Parameter

For Ping and SYN/SYN-ACK Flooding attacks you can specify thresholds for

 

triggering the dropping of packets by the switch. Select:

 

• 64 kbps - the switch will drop packets when the rate of incoming Ping or SYN/

 

SYN-ACK packets reaches this limit.

 

• 128 kbps - the switch will drop packets when the rate of incoming Ping or SYN/

 

SYN-ACK packets reaches this limit.

Apply

Click Apply to save your changes to the switch.

 

 

 

91

ES-1528 User’s Guide