Simple definition
A rule of protection against certain abnormal network volumes or behaviors.
Technical definition
DoS policies can detect or block anomalies like SYN flood, UDP The flood, the port of the scan or other thresholds.
What is it used for ?
Reduce the impact of certain volumetric or mediated attacks.
Practical example
A DoS policy on WAN may limit a SYN flood to a published address.
Common issues
- Too low threshold blocking legitimate traffic
- Policy applied on poor interface
- Absence of monitoring anomalies
Related terms
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.