Avaya BCM50 User Manual download pdf (Page 23)

IP Firewall

NN40011-045 Issue 1.2 BCM50 Rls 6.0 23

Attack Alert Settings

Field

Default Value

Description

One

Minute

Low

80 existing half-open

sessions.

This is the rate of new half-open sessions that causes

the firewall to stop deleting half-open sessions. The

BCM50 Integrated Router continues to delete half-

open sessions as necessary, until the rate of new

connection attempts drops below this number.

One

Minute

High

100 half-open

sessions per minute.

The above numbers

cause the BCM50

Integrated Router to

start deleting half-

open sessions when

more than 100

session establishment

attempts have been

detected in the last

minute, and to stop

deleting half-open

sessions when fewer

than 80 session

establishment

attempts have been

detected in the last

minute.

This is the rate of new half-open sessions that causes

the firewall to start deleting half-open sessions. When

the rate of new

connection attempts rises above this number, the

BCM50 Integrated Router deletes half-open sessions

as required to accommodate new connection attempts.

Maximum

Incomplete

Low

80 existing half-open

sessions.

This is the number of existing half-open sessions that

causes the firewall to stop deleting half-open sessions.

The BCM50 Integrated Router continues to delete half-

open requests as necessary, until the number of

existing half-open sessions drops below this number.

Maximum

Incomplete

High

100 existing half-open

sessions. The above

values causes the

BCM50e/be Integrated

Router to start

deleting half-open

sessions when the

number of existing

half-open sessions

rises above 100, and

to stop deleting half-

open sessions with

the number of

existing half-open

sessions drops below

80.

This is the number of existing half-open sessions that

causes the firewall to start deleting half-open sessions.

When the number of existing half-open sessions rises

above this number, the BCM50 Integrated Router

deletes half-open sessions as required to

accommodate new connection requests. Do not set

Maximum Incomplete High to lower than the current

Maximum Incomplete Low number.

TCP

Maximum

Incomplete

10 existing half-open

TCP sessions.

This is the number of existing half-open TCP sessions

with the same destination host IP address that causes

the firewall to start dropping half-open sessions to that

same destination host IP address. Enter a number

between 1 and 256. As a general rule, you should

choose a smaller number for a smaller network, a

slower system or limited bandwidth.

Blocking

Period

Select this check box

to specify a number in

minutes (min) text

box.

When TCP Maximum Incomplete is reached you can

choose if the next session should be allowed or

blocked. If you check

Blocking Period any new sessions will be blocked for

the length of time you specify in the next field (min)

1 2 ... 18 19 20 21 22 23 24 25 26

Comments to this Manuals

No comments

Avaya BCM50 User Manual Page 23

Comments to this Manuals

Related products and manuals for Routers Avaya BCM50