Preparing for DoS attacks
A prolonged denial of service (DoS) can bring your servers to a standstill if your FortiADC appliance and your network devices are not configured for it. To fight DoS attacks, see
“Protecting against TCP SYN floods” and
“Rate limiting”. Also configure protections on your FortiGate and other network devices. DoS attacks can use a variety of mechanisms. For in-depth DoS protection against a wide variety of DoS attacks, you can use a specialized appliance such as FortiDDoS.
In the FortiADC appliance's web UI, you can watch for attacks in two ways:
• Monitor current HTTP traffic on the dashboard. Go to System > Status > Dashboard and examine the Virtual Server Network Throughputwidget.
• Examine attack history in the traffic log. Go to Logs & Report > Log Access > Traffic.