Netgear SRX5308 Specifications download pdf (Page 107)

Firewall Protection

107

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308

Figure 56.

2. Enter the settings as explained in the following table:

Table 20. Attack Checks screen settings

Setting Description

WAN Security Checks

Respond to Ping on

Internet Ports

Select the Respond to Ping on Internet Ports check box to enable the VPN

firewall to respond to a ping from the Internet. A ping can be used as a diagnostic

tool. Keep this check box cleared unless you have a specific reason to enable the

VPN firewall to respond to a ping from the Internet.

Enable Stealth Mode Select the Enable Stealth Mode check box (which is the default setting) to prevent

the VPN firewall from responding to port scans from the WAN, thus making it less

susceptible to discovery and attacks.

Block TCP flood Select the Block TCP flood check box to enable the VPN firewall to drop all invalid

TCP packets and to protect the VPN firewall from a SYN flood attack.

A SYN flood is a form of denial of service attack in which an attacker sends a

succession of SYN (synchronize) requests to a target system. When the system

responds, the attacker does not complete the connections, thus leaving the

connection half-open and flooding the server with SYN messages. No legitimate

connections can then be made. By default, the Block TCP flood check box is

cleared.

1 2 ... 102 103 104 105 106 107 108 109 110 111 112 ... 356 357

No comments

Netgear SRX5308 Specifications Page 107