FAQ-which attack defense functions become effective only configured IP Statistics function under domain USG3000 opened?

Publication Date:  2012-09-25 Views:  117 Downloads:  0
Issue Description
USG3000 firewall configures the port scanning attack defense command, but it is not become effective.
Alarm Information
none
Handling Process
1, Configure the SYN Flood/UDP Flood/ICMP Flood attack defense function based on the destination IP address or domain that must enable the IP inbound Statistics function of destination security domain;
2, Configure address scanning/port scanning attack defense function that must enable IP outbound Statistics function of destination security domain.
Root Cause
Only opening the domain IP Statistics function, the following attack defense function can work:
1, the SYN Flood/UDP Flood/ICMP Flood attack defense function based on the destination IP address or domain must enable the IP inbound Statistics function of destination security domain;
2, address scanning/port scanning attack defense function must enable IP outbound Statistics function of destination security domain;.
Suggestions
none

END