Skip to main content
NeilG
New Member
April 10, 2015
Solved

Why can't I see DOS Policy option in gui on a 60D with 5.2.3

  • April 10, 2015
  • 3 replies
  • 11359 views

Does the 60D not support DOS-Policy GUI?

 

Per the 5.2.3 release notes the following issue was fixed:

260342 The DOS Policy ID may be missing in the GUI

 

Thanks!

 

 

    Best answer by Christopher_McMullan

    The threshold for GUI display of DoS policies are models 100 and above.

    The bug mentioned in the release notes was specifically in the case of existing DoS policies not displaying their IDs in the GUI after upgrading from 5.0.9 to 5.2.2.

    3 replies

    Christopher_McMullan
    Staff
    Staff
    April 10, 2015

    The threshold for GUI display of DoS policies are models 100 and above.

    The bug mentioned in the release notes was specifically in the case of existing DoS policies not displaying their IDs in the GUI after upgrading from 5.0.9 to 5.2.2.

    Fullmoon
    New Member
    July 3, 2015

    could you share on how to apply DoS policy using FGT 60D. Thanks

    TheJaeene
    New Member
    July 6, 2015

    Hi Neil,

     

    Here is an CLI Example bound to WAN1 with the default Values set to Log & Block

     

    config firewall DoS-policy edit 1 set interface "wan1" set srcaddr "all" set dstaddr "all" set service "ALL" config anomaly edit "tcp_syn_flood" set status enable set log enable set action block set threshold 1000 next edit "tcp_port_scan" set status enable set log enable set threshold 100 next edit "tcp_src_session" set status enable set log enable set threshold 5000 next edit "tcp_dst_session" set status enable set log enable set threshold 5000 next edit "udp_flood" set status enable set log enable set action block set threshold 2000 next edit "udp_scan" set status enable set log enable set threshold 2000 next edit "udp_src_session" set status enable set log enable set threshold 5000 next edit "udp_dst_session" set status enable set log enable set threshold 5000 next edit "icmp_flood" set status enable set log enable set action block set threshold 250 next edit "icmp_sweep" set status enable set log enable set threshold 100 next edit "icmp_src_session" set status enable set log enable set threshold 300 next edit "icmp_dst_session" set status enable set log enable set threshold 1000 next edit "ip_src_session" set status enable set log enable set threshold 5000 next edit "ip_dst_session" set status enable set log enable set threshold 5000 next edit "sctp_flood" set status enable set log enable set action block set threshold 2000 next edit "sctp_scan" set status enable set log enable set threshold 1000 next edit "sctp_src_session" set status enable set log enable set threshold 5000 next edit "sctp_dst_session" set status enable set log enable set threshold 5000 next end

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.