Login
- Table of Contents
-
- H3C SecPath Security Products FAQ(V7)-6W100
- 00-Preface
- 01-System management and maintenance FAQ
- 02-Device forwarding FAQ
- 03-License management FAQ
- 04-RBM-based hot backup FAQ
- 05-NAT FAQ
- 06-User access and authentication FAQ
- 07-Attack detection and prevention FAQ
- 08-IPS FAQ
- 09-Anti-virus FAQ
- 10-URL filtering FAQ
- 11-File filtering FAQ
- 12-Bandwidth management FAQ
- 13-SSL VPN FAQ
- 14-IPsec FAQ
- 15-Load balancing FAQ
- 16-Mirroring FAQ
- 17-IRF FAQ
- 18-Security policy FAQ
- 19-Security zone FAQ
- 20-ASPF FAQ
- 21-PKI FAQ
- 22-APR FAQ
- 23-DPI FAQ
- 24-Application audit and management FAQ
- 25-Data filtering FAQ
- 26-Data analysis center FAQ
- 27-WAF FAQ
- 28-AFT FAQ
- 29-SSL decryption FAQ
- 30-NetShare control FAQ
- 31-FAQ on Intranet security comprehensive scoring (Security overview)
- 32-Web operations FAQ
- Related Documents
-
23-DPI FAQ
DPI FAQ
Q. How do I understand DPI will try its best to detect packets after the memory threshold is reached?
A. Memory resources will be requested when DPI processes packets. However, the time memory resources are requested is not determined and depends on the order of a packet in the flow and the packet payload. Memory resources are not requested for each packet. New memory resources will be requested for each flow (DPI is flow based). After the memory threshold is reached, the software will not request new memory resources from the system. However, DPI has a small memory pool that can supports the processing of a small number of flows. Old sessions will be deleted to make room for new sessions. After the memory threshold is reached, most new traffic will not be detected by DPI due to memory request failure. DPI will try its best to use existing resources to detect packets.
Q. I can sends viruses through email and bypass detection of DPI. Why?
A. DPI supports only limited encoding methods (Base64, QP, and URL encoding). For compressed packets, DPI supports only the gzip compression. DPI cannot decrypt packets, so it cannot identify encrypted packets. Emails use 7-bit encoding and cannot be detected by DPI.
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。 H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!
