金盾防火墙设置参数
1）主机显示当时处于设备下的主机的IP地址，当主机数量超出100个IP时，地址将依据掩码分段显示，点击进入可检测段内主机，每个主机IP地址也是一个超连接，点击后即可进入主机状况设定页面2）带宽显示该主机的入口和出口带宽占用，以Mbps为单位。注：若某台主机对外进行假造源地址的攻击（如SYNFlood），因为其源地址是假造的，设备无法定位到详细的机器，而只会在总流量中显示。3）频率显示该主机遭到攻击的频率，现在首要计算为SYN报文频率、ACK报文频率、UDP报文频率、，ICMP报文频率、FRAG报文频率、NonIP报文频率、NewTCP连接和NewUDP连接。4）连接显示外部与该主机建立的连接数（in），该主机与外部建立的连接数（out），及UDP连接。in连接远远超过正常值的连接数量表示该主机也许遭到代/理型攻击，如CC类攻击等，请设置相应的防护模式或连接金盾售后技术支持。5）防护模式显示该主机当时流量图，一起主机状况也显示在左边，页面如下图所示：(1) The host displays the IP address of the host under the device at that time. When the number of hosts exceeds 100 IPs, the addresses will be displayed in segments according to the mask. Click to enter the hosts in the detectable segment. The IP address of each host is also a hyperlink. Click to enter the host status setting page 2) Bandwidth displays the ingress and egress bandwidth occupancy of the host, in Mbps. Note: If a host attacks with a fake source address (such as SYNFlood), because its source address is fake, the device cannot locate the detailed machine, but will only be displayed in the total traffic. 3) The frequency shows the frequency of the host being attacked. Now it is mainly calculated as the frequency of SYN packets, the frequency of ACK packets, the frequency of UDP packets, the frequency of ICMP packets, the frequency of FRAG packets, the frequency of NonIP packets, the frequency of NewTCP connections and the NewUDP connection. 4) Connections Display the number of connections established by the external host with the host (in), the number of connections established by the host with the outside world (out), and UDP connections. The number of in connections far exceeding the normal value indicates that the host may be subject to proxy/proxy attacks, such as CC attacks, etc. Please set the corresponding protection mode or connect to the after-sales technical support of Golden Shield. 5) The protection mode displays the current traffic map of the host, and the status of the host is also displayed on the left, as shown in the following figure:)
页:
[1]