Navigation
Related Documentation
- ACX, EX, J, M, MX, PTX, SRX, T Series
- Stateless Firewall Filter Types
- Guidelines for Configuring Standard Firewall Filters
- EX, J, M, MX, PTX, SRX, T Series
- Guidelines for Applying Standard Firewall Filters
- Understanding How to Use Standard Firewall Filters
Standard Stateless Firewall Filter Overview
Firewall filters provide a means of protecting your router (and switch) from excessive traffic transiting the router (and switch) to a network destination or destined for the Routing Engine. Firewall filters that control local packets can also protect your router (and switch) from external incidents.
You can configure a firewall filter to do the following:
- Restrict traffic destined for the Routing Engine based on its source, protocol, and application.
- Limit the traffic rate of packets destined for the Routing Engine to protect against flood, or denial-of-service (DoS) attacks.
- Address special circumstances associated with fragmented packets destined for the Routing Engine. Because the device evaluates every packet against a firewall filter (including fragments), you must configure the filter to accommodate fragments that do not contain packet header information. Otherwise, the filter discards all but the first fragment of a fragmented packet.
Related Documentation
- ACX, EX, J, M, MX, PTX, SRX, T Series
- Stateless Firewall Filter Types
- Guidelines for Configuring Standard Firewall Filters
- EX, J, M, MX, PTX, SRX, T Series
- Guidelines for Applying Standard Firewall Filters
- Understanding How to Use Standard Firewall Filters
Published: 2013-04-10
Related Documentation
- ACX, EX, J, M, MX, PTX, SRX, T Series
- Stateless Firewall Filter Types
- Guidelines for Configuring Standard Firewall Filters
- EX, J, M, MX, PTX, SRX, T Series
- Guidelines for Applying Standard Firewall Filters
- Understanding How to Use Standard Firewall Filters