Figure 2-5 Virus Throttle inconsistency message
If you click Yes here, the utility closes and the inconsistent settings remain. If you click No, the
Configuration Tab displays again so you can change your settings and save them.
Configuring Virus Throttle parameters
The Configuration tab shows the current delay queue and host settings, and lets you configure
them for all active instances of the Virus Throttle filter driver. You can configure the settings for
Transmission Control Protocol (TCP) packets and User Datagram Protocol (UDP) packets.
You can configure the following parameters:
•
Delay Queue Size: controls the maximum number of delayed connection requests in the
queue for each instance of the filter driver. Requests over the queue size are dropped. The
default is 200 delayed connection requests. The valid range is 1 - 1000.
•
Delay Queue High Water Mark: controls the number of connection requests in the delay
queue at which virus-like activity is considered to be occurring for each instance of the filter
driver. The default is 160 connection requests. The valid range is 1 - Delay Queue Size.
•
Delay Queue Low Water Mark: controls the number of connection requests in the delay
queue below which virus-like activity is considered to be stopped. The default is 100
connection requests. The valid range is 1 - High Water Mark.
•
Delay Period: controls the rate at which connection requests are removed from the delay
queue and passed down the protocol network stack. The default is 1 second. The valid range
is 1 - 10 seconds.
•
Host Working Set Size: controls the number of known machines to which connections are
established without delay. When a new connection is made, the oldest member of the working
set is replaced with the new host. The default is 5 hosts. The valid range is 1 - 100. This
setting is only supported for TCP packets.
•
Address Lifetime: controls the number of timer intervals that an address remains in the
working set after the last outbound packet was sent to it. The default is 2 hours. The valid
range is 1–100. This setting is only supported for UDP packets.
•
Address Hint Lifetime: controls the number of timer intervals that an address is kept in the
working set after the last inbound packet was received from it. The default is 1 minute. The
valid range is 1–5. This setting is only supported for UDP packets.
•
Max Slack: Controls the number of known machines to which connections are established
without delay. The default is 5 hosts. The valid range is 1–50. This setting is only supported
for UDP packets.
The following controls are available:
•
TCP: enables configuration of delay queue and host settings for Transmission Control
Protocol (TCP) packets.
•
UDP: enables configuration of delay queue and host settings for User Datagram Protocol
(UDP) packets.
Keep Proportions: provides a way to keep the high and low water mark values at a preset
percentage of the delay queue size for TCP and UDP outbound connection request. When
Keep Proportions is not selected, the delay queue high and low water mark values can be
changed. When Keep Proportions is selected, the delay queue high and low water mark
values cannot be changed, and are automatically preset at 80% of the delay queue size for
the high water mark and 50% of the delay queue size for the low water mark.
20
Virus Throttle