https://community.cisco.com/t5/network-security/firepower-dos/m-p/4493177#M1084635 <P>Hello,</P><P>I have configured rate based attacks on Network Analysis to prevent a server from DoS attacks and it works fine.</P><P>&nbsp;</P><P>Now i have to fine tune the policy and need to know how many established connections/sessions are there per source IP address. On the server i think a netstat would give that but how/where do i get on firepower how many established connections are there to the said destination(server) at peak hours.</P><P>&nbsp;</P><P>Thanks to advise.</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 27 Oct 2021 05:36:44 GMT ashleybabajee 2021-10-27T05:36:44Z https://community.cisco.com/t5/network-security/firepower-dos/m-p/4493177#M1084635 <P>Hello,</P><P>I have configured rate based attacks on Network Analysis to prevent a server from DoS attacks and it works fine.</P><P>&nbsp;</P><P>Now i have to fine tune the policy and need to know how many established connections/sessions are there per source IP address. On the server i think a netstat would give that but how/where do i get on firepower how many established connections are there to the said destination(server) at peak hours.</P><P>&nbsp;</P><P>Thanks to advise.</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 27 Oct 2021 05:36:44 GMT https://community.cisco.com/t5/network-security/firepower-dos/m-p/4493177#M1084635 ashleybabajee 2021-10-27T05:36:44Z