The device provides powerful and easy-to-configure attack defense functions to defend against flood and single-packet attacks.
With the anti-DDoS function, the device can defend against various flood attacks, such as SYN, UDP, ICMP, HTTP, HTTPS, DNS Request, DNS Response, and SIP flood attacks. The self-learning function enables the device to intelligently analyze traffic and recommend a proper traffic threshold.
With the single-packet attack defense function, the device can generate alarms on or discard attack packets, such as scanning attack packets, malformed packets, special packets, and illegal access packets.
With the blacklist function, the device can blacklist the IP addresses of users with multiple consecutive failed login attempts to prevent brute-force password cracking attacks. You can also manually blacklist a suspicious IP address or user name.
Blacklist: You can also manually blacklist a suspicious IP address or user.
With the IP-MAC binding function, the device discards packets whose IP addresses do not match the MAC addresses. You can manually create IP/MAC bindings or select them from the ARP table learned by the device.