[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Enabling UDP Flood Protection

UDP flooding occurs when an attacker sends IP packets containing UDP datagrams with the purpose of slowing down the victim to the point that the victim can no longer handle valid connections.

Before You Begin
For background information, read Understanding UDP Flood Attacks.

You can use either J-Web or the CLI configuration editor to enable UDP flood protection. The specified zone is where a flood might originate.

Note: The value unit is UDP packets per second. The default value is 1000 packets per second.

This topic covers:

J-Web Configuration

To configure zones:

Select Configure>CLI Tools>Point and Click CLI.
Next to Security, click Configure or Edit.
Next to Zones, click Configure.
Next to Security zone, click Add new entry.
In the Name box, type external.
In the Screen box, type external-udp-flood and click OK.
To save and commit the configuration, click Commit.

To configure screens:

Select Configure>CLI Tools>Point and Click CLI.
Next to Security, click Configure or Edit.
Next to Screen, click Configure.
Next to Ids option, click Add new entry.
In the Name box, type 1000-udp-flood.
Next to Udp, click Configure.
Next to Flood, select the check box and click Configure.
In the Threshold box, type 1000 and click OK.
To save and commit the configuration, click Commit.

CLI Configuration


            
               user@host# set security zones security-zone
                     external screen external-udp-flood
               user@host# set security screen ids-option
                     1000-udp-flood udp flood threshold 1000

Enabling UDP Flood Protection

J-Web Configuration

CLI Configuration

Related Topics