User's Manual

57
Chapter 9
Network Security
9. 1. Protect the Network from Cyber Attacks
The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection
protect the router from cyber attacks.
The SPI Firewall can prevent cyber attacks and validate the traffic that is passing
through the router based on the protocol. This function is enabled by default, and it’s
recommended to keep the default setting.
DoS Protection can protect your home network against DoS attacks from flooding your
network with server requests. Follow the steps below to configure DoS Protection.
1. Visit http://tplinkwifi.net, and log in with the username and password you’ve set for
the router.
2. Go to Advanced > Security > Settings.
3. Enable DoS Protection.
4. Set the level (Off, Low, Middle or High) of protection for ICMP-FLOOD Attack
Filtering, UDP-FlOOD Attack Filtering and TCP-SYN-FLOOD Attack Filtering.
• ICMP-FLOOD Attack Filtering - Enable to prevent the Internet Control Message
Protocol (ICMP) flood attack.
• UDP-FlOOD Attack Filtering - Enable to prevent the User Datagram Protocol
(UDP) flood attack.
• TCP-SYN-FLOOD Attack Filtering - Enable to prevent the Transmission Control
Protocol-Synchronize (TCP-SYN) flood attack.
Tips:
The level of protection is based on the traffic packets number. The protection will be triggered immediately
when the number of packets exceeds the preset threshold value (the value can be set on Advanced > System
Tools > System Parameters > DoS Protection Level Settings), and the vicious host will be displayed in the
Blocked DoS Host List.