beautypg.com

Configuration guidelines – H3C Technologies H3C SecPath F1000-E User Manual

Page 650

background image

8

Figure 11 Configure the action to be taken upon SYN flood detection

Select Trust from the Security Zone drop-down list.

Select the Add protected IP entry to TCP Proxy check box in the Attack Prevention
Policy
area.

Click Apply.

In the SYN Flood Configuration area, click Add. Configure global settings as shown in

Figure

12

.

Figure 12 Configure global settings

Select Global Configuration of Security Zone.

Use the default values for the connection rate threshold and half connection count threshold.

Click Apply.

Configuration Guidelines

Follow these guidelines when configuring TCP proxy:

1.

TCP proxy is effective only for incoming traffic of the security zone.

2.

The performance of the Web-based management system may be degraded if the system’s IP
address and port number are in the protected IP entry list.

This manual is related to the following products: