Operation: | Configuration DOS Settings
Description: | Configure settings to provide protection against different types of Denial of Service(DoS) attacks.

Sample Configuration
    	<DoSSettings>
    		<SYNFlood>
    			<Source>
    				<PacketRatePerSource>12000</PacketRatePerSource>
    				<BurstRatePerSource>100</BurstRatePerSource>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Source>
    			<Destination>
    				<PacketRatePerDestination>12000</PacketRatePerDestination>
    				<BurstRatePerDestination>100</BurstRatePerDestination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</SYNFlood>
    		<UDPFlood>
    			<Source>
    				<PacketRatePerSource>12000</PacketRatePerSource>
    				<BurstRatePerSource>100</BurstRatePerSource>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Source>
    			<Destination>
    				<PacketRatePerDestination>18000</PacketRatePerDestination>
    				<BurstRatePerDestination>100</BurstRatePerDestination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</UDPFlood>
    		<TCPFlood>
    			<Source>
    				<PacketRatePerSource>12000</PacketRatePerSource>
    				<BurstRatePerSource>100</BurstRatePerSource>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Source>
    			<Destination>
    				<PacketRatePerDestination>12000</PacketRatePerDestination>
    				<BurstRatePerDestination>100</BurstRatePerDestination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</TCPFlood>
    		<ICMPFlood>
    			<Source>
    				<PacketRatePerSource>120</PacketRatePerSource>
    				<BurstRatePerSource>100</BurstRatePerSource>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Source>
    			<Destination>
    				<PacketRatePerDestination>300</PacketRatePerDestination>
    				<BurstRatePerDestination>100</BurstRatePerDestination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</ICMPFlood>
    		<DroppedSourceRoutedPackets>
    			<Destination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</DroppedSourceRoutedPackets>
    		<DisableICMPRedirectPacket>
    			<Destination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</DisableICMPRedirectPacket>
    		<DisableARPFlooding>
    			<Destination>
    				<ApplyFlag>Enable/Disable</ApplyFlag>
    			</Destination>
    		</DisableARPFlooding>
    	</DoSSettings>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
PacketRatePerSource | No | 1 | Description: Specify total number of packets allowed to a particular user for SYN flood attack. PacketRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerSource | No | 1 | Description: Specify maximum number of packets allowed to a particular user at a given time. BurstRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Select the flag to control allowed number of packets. ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerDestination | No | 1 | Description: Specify total number of packets allowed from a particular user. PacketRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerDestination | No | 1 | Description: Specify maximum number of packets allowed from a particular user at a given time. BurstRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkSYNFloodDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerSource | No | 1 | Description: Specify 'txtUDPFloodSrcPacket' PacketRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerSource | No | 1 | Description: Specify 'txtUDPFloodSrcBurst' BurstRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkUDPFloodSrc' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerDestination | No | 1 | Description: Specify 'txtUDPFloodDstPacket' PacketRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerDestination | No | 1 | Description: Specify 'txtUDPFloodDstBurst' BurstRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkUDPFloodDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerSource | No | 1 | Description: Specify 'txtTCPFloodSrcPacket' PacketRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerSource | No | 1 | Description: Specify 'txtTCPFloodSrcBurst' BurstRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkTCPFloodSrc' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerDestination | No | 1 | Description: Specify 'txtTCPFloodDstPacket' PacketRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerDestination | No | 1 | Description: Specify 'txtTCPFloodDstBurst' BurstRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkTCPFloodDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerSource | No | 1 | Description: Specify 'txtICMPFloodSrcPacket' PacketRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerSource | No | 1 | Description: Specify 'txtICMPFloodSrcBurst' BurstRatePerSource confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkICMPFloodSrc' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
PacketRatePerDestination | No | 1 | Description: Specify 'txtICMPFloodDstPacket' PacketRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 600000 is allowed. Maximum characters allowed are 6.
BurstRatePerDestination | No | 1 | Description: Specify 'txtICMPFloodDstBurst' BurstRatePerDestination confines to: Type is 'SCALAR'. Datatype is 'STRING'. Allowed first digit (1-9) Remaining allowed: Digit. Range 1 to 10000 is allowed. Maximum characters allowed are 5.
ApplyFlag | No |  | Description: Specify 'chkICMPFloodDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
ApplyFlag | No |  | Description: Specify 'chkDropSourceRoutedPacketsDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
ApplyFlag | No |  | Description: Specify 'chkDisableICMPredirectPacketDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.
ApplyFlag | No |  | Description: Specify 'chkDisableARPFloodingDst' ApplyFlag confines to: Type is 'SCALAR'. Datatype is 'STRING'.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Configuration DOS Settings | 200 |
Configuration DOS Settings | 500 |

) Copyright 2015 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.