Best way to establish secure connection

Hello JOSEPH WILLA,

Thank you for reaching out to the community, please refer the KBA below:
> Create DNAT and firewall rules for internal servers: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/RulesPoliciesCreateDNATAndFirewallRulesForInternalServers/index.html

Hi Joseph,

You may also refer to the following KB's below.

Configure email protection in MTA: https://soph.so/LK3rXj

How to prevent Dos & DDos Attack: https://soph.so/DxuAjk

For additional info, FW Best Practice: https://soph.so/GcUSIV

Hi Eric Jan,

Which XGS have DDoS functionality ?  XG 125, XGS 2100 do not have.
The smart filter "ddos" shows nothing.

Regards
Jan

Hi,

they all have DDoS function. Check the IPS and DOS functions.

Ian

Hi rfcat_vk,

I asked for DDoS and not DoS as described in https://soph.so/DxuAjk Intrusion Prevention> IPS Policies.

Regards
Jan

The screenshot shows an IPS policies tab. DDoS and DOS and IPS policies are all part of the same GUI menu.

Ian

That is really a very generic search. DDoS comes in many forms and a number of existing policies will cover the issue.

you appear to be looking for a simple answer to a very complex issue. A search of the forums will provide you with some more answers. Basically you cannot stop DDoS attacks because they come from unknown source/s external to your control. If an attacker saturates your line then there is nothing you can do about it.

ian