R3204P16-HP Load Balancing Module Security Configuration Guide-6PW101

44
Figure 48 Select the bidirectional mode and enable TCP proxy for zone Untrust
• Select Bidirection for the global setting.
• Click Apply.
• In the Zone Configuration area, click Enable for the Untrust zone.
# Add an IP address entry manually for protection.
• Select the Protected IP Configuration tab. Then on the right pane, click Add. Add an IP address
entry for protection as shown in Figure 49.
Figure 49 Add an IP ad
dress entry for protection
• Type 20.0.0.10 in the Protected IP Address text box.
• Click Apply.
# Configure the SYN flood detection feature, specifying to automatically add protected IP address
entries.
• Select the SYN Flood tab. In the Attack Prevention Policy area, configure the action to be taken
upon detecting a SYN flood attack, as shown in Figure 50.
Figure 50 Configure the
action to be taken upon detecting a SYN flood attack