Home
Главная
Planet
Межсетевые Экраны
SG-1000
Инструкция по эксплуатации Страница: 228

Planet SG-1000 [228/262] Sg 1000 alarm and to prevent the computer which being attacked to send ddos packets to lan network

15.1 SG-1000 Alarm and to prevent the computer which being

attacked to send DDoS packets to LAN network

STEP 1﹒Select Internal Alert in Alert Setting and enter the following settings:

 Enter The threshold sessions of infected Blaster (per Source IP) (the

default value is 30 Sessions/Sec)

 Select Enable Blaster Blocking and enter the Blocking Time (the

default time is 60 seconds)

 Select Enable E-Mail Alert Notification

 Select Enable NetBIOS Alert Notification

 IP Address of Administrator: Enter 192.168.1.10

 Click OK

 Internal Alert Setting is completed.

Internal Alert Settings

２２７

Содержание

Ce mark warning 2
Copyright 2
Disclaimer 2
Trademarks 2
Customer service 3
Revision 3
Table of contents 4
Chapter 1 7
Chapter 1 introduction 7
Introduction 7
Administration 11
Chapter 2 11
Chapter 2 administration 11
Define the required fields of administrator 12
Adding a new sub administrator 13
Modify the administrator s password 14
Add permitted ips 15
Logout 16
Software update 18
Chapter 3 19
Chapter 3 configure 19
Configure 19
Define the required fields of settings 20
Define the required fields of multiple subnet 21
Define the required fields of time settings 21
Define the required fields of ddns 23
Define the required fields of dhcp 23
Define the required fields of host table 23
System settings exporting 24
System settings importing 25
Restoring factory default settings 26
Enabling e mail alert notification 27
Reboot sg 1000 28
Date time settings 29
Multiple subnet 30
Adding multiple subnet 31
Route table 34
Route table 35
Dynamic dns settings 40
Host table 42
Language 43
Chapter 4 44
Chapter 4 interface 44
Interface 44
Define the required fields of interface 45
Modify lan interface settings 49
Setting wan interface address 50
Setting dmz interface address nat mode 58
Setting dmz interface address transparent mode 59
Address 60
Chapter 5 60
Chapter 5 address 60
Define the required fields of address 61
Under dhcp situation assign the specific ip to static users and restrict them to access ftp net service only through policy 63
Setup a policy that only allows partial users to connect with specific ip external specific ip 66
Chapter 6 70
Chapter 6 service 70
Service 70
Define the required fields of service 71
Allow external user to communicate with internal user by voip through policy voip port tcp 1720 tcp 15328 15333 udp 15328 15333 73
Setting service group and restrict the specific users only can access to service resource that provided by this group through policy group http pop3 smtp dns 77
If you want to remove the service you choose from selected service choose the service 78
You want to delete and click remove 78
７７ 78
Chapter 7 80
Chapter 7 schedule 80
Schedule 80
To configure the valid time periods for lan users to access to internet in a day 81
Chapter 8 83
Chapter 8 qos 83
８３ 84
Define the required fields of qos 85
Setting a policy that can restrict the user s downstream and upstream bandwidth 86
Step 2 use the qos that set by step1 in outgoing policy 87
Authentication 88
Chapter 9 88
Chapter 9 authentication 88
Define the required fields of authentication 89
Setting a specific user to connect with external network only before passing the authentication of policy adopt the built in auth user and group function 94
Setting the users to connect with external network only before passing the authentication of policy adopt external radius server built in windows 2003 server authentication 98
Setting the users to connect with external network only before passing the authentication of policy adopt the external pop3 server authentication 119
Chapter 10 122
Chapter 10 content blocking 122
Content filtering 122
Define the required fields of content blocking 123
Restrict the internal users only can access to some specific website 126
Url blocking 126
Restrict the internal users to access to script file of website 129
Restrict the internal users to access to the file on internet by p2p 131
Restrict the internal users to send message files video and audio by instant messaging 133
Restrict the internal users to access to video audio and some specific sub name file from http or ftp protocol directly 135
Chapter 11 137
Chapter11 virtual server 137
Virtual server 137
Define the required fields of virtual server 139
Make a single server that provides several services such as ftp web and mail to provide service by policy 141
Step 7 complete the setting of providing several services by mapped ip 143
Make several servers that provide a single service to provide service through policy by virtual server take web service for example 144
The external user use voip to connect with voip of lan voip port tcp 1720 tcp 15328 15333 udp 15328 15333 147
Make several servers that provide several same services to provide service through policy by virtual server take http pop3 smtp and dns group for example 151
Step 7 complete the setting of providing several services by virtual server 155
１５４ 155
Chapter 12 156
Chapter12 vpn 156
Define the required fields of vpn 157
Define the required fields of ipsec function 159
Define the required fields of pptp server function 160
Define the required fields of pptp client function 161
Define the required fields of trunk function 162
Setting ipsec vpn connection between two sg 1000 164
Step 12 complete ipsec vpn connection 176
Setting pptp vpn connection between two sg 1000 177
Chapter 13 188
Chapter13 policy 188
Policy 188
Define the required fields of policy 190
Set up the policy that can monitor the internal users take logging statistics and alarm threshold for example 194
Forbid the users to access to specific network take specific wan ip and content blocking for example 197
Only allow the users who pass authentication to access to internet in particular time 202
The external user control the internal pc through remote control software take pcanywhere for example 204
Set a mail server to allow the internal and external users to receive and send e mail under dmz transparent mode 206
Chapter 14 210
Chapter14 web vpn ssl vpn 210
Web vpn ssl vpn 210
Define the required fields of setting 211
Define the required fields of vpn 211
Define the required fields of status 212
Setting web vpn ssl vpn connection between external client and sg 1000 213
Alert setting 223
Chapter 15 223
Chapter15 alert setting 223
Define the required fields of hacker alert 224
Destination addresses the same source port and destination port and when syn on the tcp header is marked enable this function to detect such abnormal packets 227
Detect land attack some systems may shut down when receiving packets with the same source and 227
Sg 1000 alarm and to prevent the computer which being attacked to send ddos packets to lan network 228
Attack alarm 232
Chapter 16 232
Chapter16 atack alarm 232
To record the ddos attack alarm from internal pc 234
To record the attack alarm about hacker attacks the sg 1000 and intranet 235
Chapter 17 237
Chapter17 log 237
To detect the information and protocol port that users use to access to internet or intranet by sg 1000 239
To record the detailed management events such as interface and event description of sg 1000 of the administrator 243
To detect event description of wan connection 246
To save or receive the records that sent by the sg 1000 249
Chapter 18 251
Chapter18 statistics 251
Statistics 251
Define the required fields of statistics 252
Wan statistics 253
Policy statistics 255
Chapter 19 257
Chapter19 status 257
Status 257
Interface 258
Authentication 260
Arp table 261
Dhcp clients 262

Planet SG-1000 [228/262] Sg 1000 alarm and to prevent the computer which being attacked to send ddos packets to lan network

Содержание

Похожие устройства