IronPort Systems ES-1528 - Manual (Page 91)

Chapter 15 Auto Denial of Service (DoS)
ES-1528 User’s Guide
91
Figure 50 Advanced Auto DoS Attack Prevention
The following table describes the labels in this screen.
Table 31 Advanced Auto DoS Attack Prevention
LABEL DESCRIPTION
Global Click this link to view the Global Auto DoS Attack Prevention screen.
Port Select the port you want to configure or select Apply settings to all ports to
configure all the ports on the switch.
Denial of
Service
Prevention
Select the types of attacks you want to prevent or choose Select All to prevent all
types of attacks and scans supported by the switch. See Section 15.1.1 on page 89
for more information on specific types of attacks.
Parameter For Ping and SYN/SYN-ACK Flooding attacks you can specify thresholds for
triggering the dropping of packets by the switch. Select:
•
64 kbps - the switch will drop packets when the rate of incoming Ping or SYN/
SYN-ACK packets reaches this limit.
• 128 kbps - the switch will drop packets when the rate of incoming Ping or SYN/
SYN-ACK packets reaches this limit.
Apply Click Apply to save your changes to the switch.