User's Manual

Table Of Contents
Enterprise 5-Port 10/100/1000T VPN Security Router
VR-300 series
- 90 -
4.6.1 Firewall
A "Denial-of-Service" (DoS) attack is characterized by an explicit attempt by hackers to prevent
legitimate users of a service from using that service. The router can prevent specific DoS attacks as
shown in Figure 4-38.
Figure 4-38: Firewall
Object
Description
SPI Firewall
The SPI Firewall prevents attack and improper access to network
resources.
The default configuration is enabled.
Block SYN Flood
SYN Flood is a popular attack way. DoS and DDoS are TCP
protocols. Hackers like using this method to make a fake connection
that involves the CPU, memory, and so on.
The default configuration is enabled.
Block FIN Flood
If the function is enabled, when the number of the current FIN
packets is beyond the set value, the router will start the blocking
function immediately.
The default configuration is disabled.