F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Command Reference-6PW100
ii
arp anti-attack source-mac exclude-mac ············································································································· 42
arp anti-attack source-mac threshold ··················································································································· 42
display arp anti-attack source-mac ······················································································································ 43
ARP packet source MAC consistency check configuration commands ···································································· 44
arp anti-attack valid-ack enable ··························································································································· 44
ARP active acknowledgement configuration commands ··························································································· 45
arp anti-attack active-ack enable ························································································································· 45
ARP detection configuration commands ······················································································································ 46
arp detection ·························································································································································· 46
arp detection enable ············································································································································· 47
arp detection trust ·················································································································································· 47
arp detection validate ··········································································································································· 48
arp restricted-forwarding enable ························································································································· 49
display arp detection ············································································································································ 49
display arp detection statistics ····························································································································· 50
reset arp detection statistics ·································································································································· 51
ARP automatic scanning and fixed ARP configuration commands ··········································································· 51
arp fixup ································································································································································· 51
arp scan ································································································································································· 52
TCP attack protection configuration commands ······································································································ 54
display tcp status ··················································································································································· 54
tcp anti-naptha enable ·········································································································································· 54
tcp state ·································································································································································· 55
tcp syn-cookie enable ··········································································································································· 56
tcp timer check-state ·············································································································································· 56
ND attack defense configuration commands ··········································································································· 58
Source MAC consistency check commands ················································································································ 58
ipv6 nd mac-check enable ··································································································································· 58
Firewall configuration commands ····························································································································· 60
IPv6 packet-filter firewall configuration commands ···································································································· 60
display firewall ipv6 statistics ······························································································································ 60
firewall ipv6 default ·············································································································································· 61
firewall ipv6 enable ·············································································································································· 62
firewall packet-filter ipv6 ······································································································································ 62
reset firewall ipv6 statistics ··································································································································· 63
ASPF configuration commands ····································································································································· 64
display port-mapping ············································································································································ 64
firewall aspf enable ·············································································································································· 65
port-mapping ························································································································································· 65
Content filtering configuration commands ··············································································································· 67
activex-blocking enable ········································································································································ 67
attachment-body-filtering keyword-entry·············································································································· 67
attachment-name-filtering filename-entry ············································································································· 68
body-filtering keyword-entry ································································································································· 69
command-filtering keyword-entry ························································································································· 70
content-filtering activex-blocking suffix ················································································································ 71
content-filtering email-address-entry ····················································································································· 72
content-filtering filename-entry ······························································································································ 73
content-filtering ftp-policy ······································································································································ 73
content-filtering java-blocking suffix····················································································································· 74
content-filtering http-policy ···································································································································· 75
content-filtering keyword-entry ····························································································································· 75