User's Manual

Page | 48
GXW450X User Manual
Version 1.0.0.6
time.
• eth(0)LAN defends against attacks directed to the LAN IP address
of the GXW450X.
•
eth(1)WAN defends against attacks directed to the WAN IP
address of the GXW450X.
SYN Flood Defense will limit the amount of SYN packets accepted by
the GXW450X from one source to 10 packets per second. Any excess
packets from that source will be discarded.
Ping-of-Death Defense
Enable
Enable to prevent Ping-of-
Death attack to the device. The default
setting is disabled. To enable or disable it, click on the check box for
the LAN or WAN (GXW450X) interface.
Dynamic Defense
Dynamic defense is supported on the GXW450X series. It can blacklist hosts dynamically when the LAN
mode is set to "Route" under Web GUISystem SettingsNetwork SettingsBasic Settings page. If
enabled, the traffic coming into the GXW450X can be monitored, which helps prevent massive connection
attempts or brute force attacks to the device. The blacklist can be created and updated by the GXW450X
firewall, which will then be displayed in the web page. Please refer to the following table for dynamic
defense options on the GXW450X.
Table 14: GXW450X Firewall Dynamic Defense
Dynamic Defense Enable
Enable dynamic defense. The default setting is disabled.
Blacklist Update Interval
Configure the blacklist update time interval (in seconds). The default
setting is 120.
Connection Threshold
Configure the connection threshold. Once the number of connections
from the same host reaches the threshold, it will be added into the
blacklist. The default setting is 100.
Dynamic Defense
Whitelist
Allowed IPs and ports range, multiple IP addresses and port range.
For example:
192.168.2.10-
192.168.2.20 5060:5061