User's Manual

Unified Services Router User Manual
110
Block Fragmented Packets: selecting this option drops any fragmented packets
through or to the gateway
Block Multicast Packets: selecting this option drops multicast packets, which could
indicate a spoof attack, through or to the gateway.
DoS Attacks:
SYN Flood Detect Rate (max/sec): The rate at which the SYN Flood can be
detected.
Echo Storm (ping pkts/sec): The number of ping packets per second at which the
router detects an Echo storm attack from the WAN and prevents further ping traffic
from that external address.
ICMP Flood (ICMP pkts/sec): The number of ICMP packets per second at which the
router detects an ICMP flood attack from the WAN and prevents further ICMP
traffic from that external address.
 The ping on LAN interfaces is enabled in default. To disable the ping response
from LAN hosts to the LAN/WAN port of the device uncheck the "Allow Ping from
LAN"option.