ZyXEL Communications 652 User Manual

Prestige 652 ADSL Security Router

Using the Prestige Web Configurator

11-9

The following table describes the fields in this screen.

Generate alert when
attack detected

A detected attack automatically generates
a log entry. Check this box to generate an
alert (as well as a log) whenever an attack
is detected. See the Logs Chapter for
more information on logs and alerts.

Denial of Service Thresholds

One Minute Low

This is the rate of new half-open sessions
that causes the firewall to stop deleting
half-open sessions. The Prestige
continues to delete half-open sessions as
necessary, until the rate of new
connection attempts drops below this
number.

80 existing half-open sessions.

One Minute High

This is the rate of new half-open sessions
that causes the firewall to start deleting
half-open sessions. When the rate of new
connection attempts rises above this
number, the Prestige deletes half-open
sessions as required to accommodate
new connection attempts.

100 half-open sessions per

minute. The above numbers

cause the Prestige to start

deleting half-open sessions

when more than 100 session

establishment attempts have

been detected in the last minute,

and to stop deleting half-open

sessions when fewer than 80

session establishment attempts

have been detected in the last

minute.

Maximum Incomplete

Low

This is the number of existing half-open
sessions that causes the firewall to stop
deleting half-open sessions. The Prestige
continues to delete half-open requests as
necessary, until the number of existing
half-open sessions drops below this
number.

80 existing half-open sessions.

Maximum Incomplete

High

This is the number of existing half-open
sessions that causes the firewall to start
deleting half-open sessions. When the
number of existing half-open sessions
rises above this number, the Prestige

100 half-open sessions per

minute. The above values

causes the Prestige to start
deleting half-open sessions

when the number of existing