P312 Broadband Security Gateway

The Prestige deletes the oldest existing half-open session for the host for every new connection request to the host. This ensures that the number of half-open sessions to a given host will never exceed the threshold.

2.If the Blocking Time timeout is greater than 0:

The Prestige blocks all new connection requests to the host giving the server time to handle the present connections. The Prestige continues to block all new connection requests until the Blocking Time expires. The Prestige also sends alerts whenever TCP Maximum Incomplete is exceeded. The global values specified for the threshold and timeout apply to all TCP connections. Click on the Attack Alert tab to bring up the next screen.

Figure 15-6

Attack Alert

The following table describes the fields in this screen.

Introducing the Prestige Web Configurator

15-9

Page 177
Image 177
ZyXEL Communications P-312 manual Attack Alert