R3204P16-HP Load Balancing Module Security Configuration Guide-6PW101

26
Figure 27 Add a UDP flood detection rule
Table 11 describes the configuration items.
Table 11 UDP flood detection configuration items
Item Descri
p
tion
Protected Host
Configuration
IP Address Specify the IP address of the protected host.
Connection Rate
Threshold
Set the maximum UDP connection rate for the IP address.
Global Configuration
of Security Zone
Connection Rate
Threshold
Set the global maximum UDP connection rate for each host in
the current security zone.
NOTE:
• In a security zone, you can confi
g
ure multiple protected hosts and one
g
lobal connection rate threshold.
• For a host, the host-specific setting overrides the global setting of the security zone in case conflict
occurs.
Configuring SYN flood detection
NOTE:
SYN flood detection is mainly intended to protect servers and is usually configured for an internal zone.
Select Security > Intrusion Detection from the navigation tree and then select the SYN Flood tab to enter
the SYN flood detection configuration page, as shown in Figure 28. Y
ou can select a security zone and
then view and configure SYN flood detection rules for the security zone.