H3C Technologies H3C SecPath F1000-E User Manual

Page 32

Advertising
background image

24

Figure 26 Configuring SYN flood detection for the DMZ

Perform the following operations on the page:

•

Select zone DMZ.

•

In the Attack Prevention Policy area, select the Discard packets when the specified attack is
detected option.

•

Click Apply.

•

In the SYN Flood Configuration area, click Add. The SYN flood attack detection page appears.

Figure 27 Configuring a SYN flood attack detection rule for the server

Perform the following operations on the page:

•

Select the Protected Host Configuration option.

•

Specify the IP address as 10.1.1.2.

•

Set the action threshold to 5000 packets per second.

•

Set the silent threshold to 1000 packets per second.

•

Click Apply to complete the configuration.

Advertising