What is the meaning of the Threshold of Flood Detection in ADP?

Zyxel_Jeff
Zyxel_Jeff Posts: 1,284  Zyxel Employee
100 Answers 500 Comments Friend Collector Fourth Anniversary

Question :

What is the meaning of the Threshold of Flood Detection in ADP?

Answer :

Threshold means the number of packets per second that match the flood detection criteria. For instance, if over 1000 ICMP packets are sent from an IP address per second, the IP will be blocked by the ICMP Flood protection of DoS Prevention for 5 seconds by default.

Test result:

The user set the ICMP Flood profile with a threshold of 1 packet per second and a block period of 5 seconds.

When the user pings the firewall, the traffic gets blocked by the firewall.

The Log message:


See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community