R3721-F3210-F3171-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

36
Figure 44 Add an IP address entry for protection
• Enter 20.0.0.10 in the Protected IP Address field.
• Click Apply.
# Configure the SYN flood detection feature, specifying to automatically add protected IP address
entries.
• Select Intrusion Detection > Traffic Abnormality > SYN Flood from the navigation tree. In the Attack
Prevention Policy area, configure the action to be taken upon detecting a SYN flood attack, as
shown in Figure 45.
Figure 45 Configuring the action to be taken upon detectin
g a SYN flood
• Select Trust from the Security Zone list.
• Select the Add protected IP entry to TCP Proxy box in the Attack Prevention Policy area.
• Click Apply.
• In the SYN Flood Configuration area, click Add. Configure global settings as shown in Figure 46.