Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 40 subscribers
  • Views 18869 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Dos and Spoof Protection - Numbers

Tiago Toledo

I want to enable Spoff Protection, do I need to be careful?

About DoS Settings, how do you work? Enable everything (SYN Flood, UDP, TCP, ICMP)? What are the recommended numbers to configure? Is the SOPHPOS standard the recommended numbers?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Tiago Toledo

    Sorry, I confused it in my previous answer, I have edited my response. You can configure 1500 packets/source for SYN and UDP Flood. Make sure you have an exception for UDP 53 and UDP 443 configured as shown in the screenshot. This will be required so that the DNS and QUIC protocols communication is not disturbed.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    Hi  

    Thank you very much for the response, it helped a lot. the SYN and UDP Flood configured successfully and with respect to TCP does not configure anything?

    And to enable it, just check "Apply flag" in the destination? No source need to enable "Apply flag"?

    And SpoofProtection is just enable, any recommendations? Attached image.

     

     

  • 0 in reply to Tiago Toledo

    You need to select the Apply Flag option for the packer/source part, you have selected it for the destination/source. Alongside, you might need to take a look at the help document(click on the help option on top right after navigating to the particular module) before configuring the Spoof Protection as you might need to add the IP-MAC binds in the device. 

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Unfiltered HTML