fwaccel dos

Description

The fwaccel dos and fwaccel6 dos commands control the Rate Limiting for DoS mitigation techniques in SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. on the local Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or Cluster Member Security Gateway that is part of a cluster..

Important:

In VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, you must go to the context of an applicable Virtual System Virtual Device on a VSX Gateway or VSX Cluster Member that implements the functionality of a Security Gateway. Acronym: VS..In Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)., run: set virtual-system <VSID>In the Expert mode, run: vsenv <VSID>
In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.
Starting from R80.40 Jumbo Hotfix Accumulator Take 92, these commands were renamed:
- from "fwaccel dos blacklist" to "fwaccel dos deny"
- from "fwaccel6 dos blacklist" to "fwaccel6 dos deny"
Starting from R80.40 Jumbo Hotfix Accumulator Take 92, these commands were renamed:
- from "fwaccel dos whitelist" to "fwaccel dos allow"
- from "fwaccel6 dos whitelist" to "fwaccel6 dos allow"

Syntax for IPv4

fwaccel dos

blacklist <options>

config <options>

pbox <options>

rate <options>

stats <options>

whitelist <options>

Starting from R80.40 Jumbo Hotfix Accumulator Take 92:

fwaccel dos

allow <options>

config <options>

deny <options>

pbox <options>

rate <options>

stats <options>

Syntax for IPv6

fwaccel6 dos

blacklist <options>

config <options>

pbox <options>

rate <options>

stats <options>

whitelist <options>

Starting from R80.40 Jumbo Hotfix Accumulator Take 92:

fwaccel6 dos

allow <options>

config <options>

deny <options>

pbox <options>

rate <options>

stats <options>

Parameters

Parameter	Description
`allow <options>` `whitelist <options>`	Starting from R80.40 Jumbo Hotfix Accumulator Take 92, replaces the "`whitelist`" parameter. Configures the allow-list for source IP addresses in the SecureXL Penalty Box. See fwaccel dos allow / whitelist.
`deny <options>` `blacklist <options>`	Starting from R80.40 Jumbo Hotfix Accumulator Take 92, replaces the "`blacklist`" parameter. Controls the IP deny-list in SecureXL. See fwaccel dos deny / blacklist.
`config <options>`	Controls the DoS mitigation configuration in SecureXL. See fwaccel dos config.
`pbox <options>`	Controls the Penalty Box whitelist in SecureXL. See fwaccel dos pbox.
`rate <options>`	Shows and installs the Rate Limiting policy in SecureXL. See fwaccel dos rate.
`stats <options>`	Shows and clears the DoS real-time statistics in SecureXL. See fwaccel dos stats.

Parameter

Description

allow <options>

whitelist <options>

Starting from R80.40 Jumbo Hotfix Accumulator Take 92, replaces the "whitelist" parameter.

Configures the allow-list for source IP addresses in the SecureXL Penalty Box.

See fwaccel dos allow / whitelist.

deny <options>

blacklist <options>

Starting from R80.40 Jumbo Hotfix Accumulator Take 92, replaces the "blacklist" parameter.

Controls the IP deny-list in SecureXL.

See fwaccel dos deny / blacklist.