What is the meaning of the Threshold of Flood Detection in ADP?

Zyxel_Jeff
Posts: 1,338
Zyxel Employee





Question :
What is the meaning of the Threshold of Flood Detection in ADP?
Answer :
Threshold means the number of packets per second that match the flood detection criteria. For instance, if over 1000 ICMP packets are sent from an IP address per second, the IP will be blocked by the ICMP Flood protection of DoS Prevention for 5 seconds by default.
Test result:
The user set the ICMP Flood profile with a threshold of 1 packet per second and a block period of 5 seconds.
When the user pings the firewall, the traffic gets blocked by the firewall.
The Log message:
Tagged:
0
Categories
- All Categories
- 435 Beta Program
- 2.7K Nebula
- 183 Nebula Ideas
- 120 Nebula Status and Incidents
- 6.2K Security
- 440 USG FLEX H Series
- 299 Security Ideas
- 1.6K Switch
- 80 Switch Ideas
- 1.2K Wireless
- 44 Wireless Ideas
- 6.7K Consumer Product
- 276 Service & License
- 433 News and Release
- 88 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 84 About Community
- 91 Security Highlight