10 lines
516 B
Plaintext
10 lines
516 B
Plaintext
# MANDATORY: Address-set definitions
|
|
set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
|
|
set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
|
|
set security address-book global address-set DMZ-NETS address 10.0.0.0/8
|
|
|
|
# DDoS Protection - Fixed thresholds (no XML!)
|
|
set security screen ids-option WAN-screen icmp flood threshold 20
|
|
set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20
|
|
set security zones security-zone WAN screen WAN-screen
|