SYN Flood Protection Methods

SYN/RST/FIN Flood protection helps to protect hosts behind the SonicWall from Denial of Service (DoS) or Distributed DoS attacks that attempt to consume the host’s available resources by creating one of the following attack mechanisms:

•
Sending TCP SYN packets, RST packets, or FIN packets with invalid or spoofed IP addresses.
•
Creating excessive numbers of half-opened TCP connections.
Topics:
•
SYN Flood Protection Using Stateless Cookies
•
Layer-Specific SYN Flood Protection Methods
•
Understanding SYN Watchlists
•
Understanding a TCP Handshake