What is the meaning of the Threshold of Flood Detection in ADP?

Zyxel_Jeff
Posts: 1,316
Zyxel Employee





Question :
What is the meaning of the Threshold of Flood Detection in ADP?
Answer :
Threshold means the number of packets per second that match the flood detection criteria. For instance, if over 1000 ICMP packets are sent from an IP address per second, the IP will be blocked by the ICMP Flood protection of DoS Prevention for 5 seconds by default.
Test result:
The user set the ICMP Flood profile with a threshold of 1 packet per second and a block period of 5 seconds.
When the user pings the firewall, the traffic gets blocked by the firewall.
The Log message:
Tagged:
0
Categories
- All Categories
- 426 Beta Program
- 2.6K Nebula
- 163 Nebula Ideas
- 112 Nebula Status and Incidents
- 6K Security
- 344 USG FLEX H Series
- 288 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 42 Wireless Ideas
- 6.6K Consumer Product
- 261 Service & License
- 404 News and Release
- 86 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.8K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 82 Security Highlight