User guide

SmartDefense Categories
Chapter 11: Using SmartDefense 211
Table 42: Distributed Denial of Service Fields
In this field… Do this…
Action Specify what action to take when a DDoS attack occurs, by selecting one of
the following:
• Block. Block the attack. This is the default.
• None. No action.
Track Specify whether to log DDoS attacks, by selecting one of the following:
• Log. Log the attack. This is the default.
• None. Do not log the attack.
IP and ICMP
This category allows you to enable various IP and ICMP protocol tests, and to configure
various protections against IP and ICMP-related attacks. It includes the following:
• Checksum Verification on page
222
• Cisco IOS DOS on page
219
• IP Fragments on page
215
• Max Ping Size on page
214
• Network Quota on page
217
• Null Payload on page
221
• Packet Sanity on page
212
• Welchia on page
218