PLANET SG-1000 - Manual (Page 225)

from attacking source IP Address that is allow to enter the network / SG-1000.
If the value exceeds the setting one, and then the device will determine it as an
attack.
‹
ICMP Flood Threshold Blocking Time(Per Source IP)Seconds :When
the SG-1000 determines as being attacked, it will block the attacking source
IP address in the blocking time you set. After blocking for certain seconds, the
device will start to calculate the max number of ICMP packets from attacking
source IP Address. And if the max number still exceed the define value, it will
block the attacking IP Address continuously.
Detect UDP Attack:
„ When Hackers continuously send PING packets to all the machines of the LAN
networks or to the SG-1000 via broadcasting, your network is experiencing an
UDP attack.
‹
UDP Flood Threshold(Total)Pkts/Sec : The System Administrator can
enter the maximum number of UDP packets per second that is allow to enter
the network/SG-1000. If the value exceeds the setting one, and then the device
will determine it as an attack.
‹
UDP Flood Threshold(Per Source IP)Pkts/Sec : The System
Administrator can enter the maximum number of UDP packets per second
from attacking source IP Address that is allow to enter the network/SG-1000.
If the value exceeds the setting one, and then the device will determine it as an
attack.
‹
UDP Flood Threshold Blocking Time ( Per Source IP) Seconds :
When SG-1000 determines as being attacked, it will block the attacking
source IP in the blocking time you set. After blocking for certain seconds, the
device will start to calculate the max number of UPD packets from attacking
source IP. If the max number still exceed the define value, it will block the
attacking IP Address continuously.