Cisco Cisco Firepower 4110 Security Appliance
Table 56: DNS Footprint Bypass Parameters (cont.)
Parameter
Description
Bypass Status
The bypass option.
Values:
Values:
•
Bypass—The DNS Flood Protection module bypasses all possible values
of the selected Bypass Field when generating a footprint.
•
Accept—The DNS Flood Protection module bypasses only the specified values
(if such a value exists) of the selected Bypass Field when generating a footprint.
Bypass Values
Used if the value of the Bypass Status parameter is Accept. DNS Flood Protection
bypasses only the values of a selected Bypass Type, while it may use all other
values. These values vary according to the Bypass Field selected. The values in the
field must be comma-delimited.
Configuring the DefensePro Advanced-
Parameters Setup
This section contains the following topics:
•
Configuring DefensePro Session Table Settings
DefensePro includes a Session table, which tracks sessions that Radware DefensePro DDoS Mitigation bridges
and forwards.
Note:
In DefensePro 8.x versions, there is one Session table for each core.
To configure Session table settings
1.
In the Configuration perspective, select Setup > Advanced Parameters > Session Table Settings.
2.
Configure the parameters, and then, click Submit.
Table 57: Session Table Session Aging Parameters
Parameter
Description
Idle TCP-Session Aging Time
The time, in seconds, that the Session table keeps idle TCP
sessions.
Values: 1–7200
Default: 100
Values: 1–7200
Default: 100
Idle UDP-Session Aging Time
The time, in seconds, that the Session table keeps idle UDP
sessions.
Values: 1–7200
Default: 100
Values: 1–7200
Default: 100
© 2016 Cisco | Radware. All rights reserved. This document is Cisco Public.
Page 105 of 281