topic Re: PIX: Reccomendation on max_embryonic_connections? in Network Security https://community.cisco.com/t5/network-security/pix-reccomendation-on-max-embryonic-connections/m-p/277742#M564497 <HTML><HEAD></HEAD><BODY><P>It really depends on the limits of the operating system you are trying to protect. For instance, Windows can handle about 125 embryonic conns at any one time. Therefore, we usually recommend setting the max embryonic connections to something below 125 for Windows hosts - 110 is usually a good place to start. Other OS's can handle more or less embryonic connections. You should be able to find this information from the OS vendor but if we can help anymore, please let us know.</P><P></P><P>Scott</P></BODY></HTML> Wed, 23 Jun 2004 19:25:26 GMT scoclayton 2004-06-23T19:25:26Z PIX: Reccomendation on max_embryonic_connections? https://community.cisco.com/t5/network-security/pix-reccomendation-on-max-embryonic-connections/m-p/277741#M564496 <P>By default the Static command doesn't impose any limit on the max. no. of SYN packets that can come thru the PIX. Because of a recent DoS attack, I need to enable this feature, but was wondering what different PIX administrators use for this value...</P><P></P><P>-Alex</P> Fri, 21 Feb 2020 07:28:49 GMT https://community.cisco.com/t5/network-security/pix-reccomendation-on-max-embryonic-connections/m-p/277741#M564496 abatson 2020-02-21T07:28:49Z Re: PIX: Reccomendation on max_embryonic_connections? https://community.cisco.com/t5/network-security/pix-reccomendation-on-max-embryonic-connections/m-p/277742#M564497 <HTML><HEAD></HEAD><BODY><P>It really depends on the limits of the operating system you are trying to protect. For instance, Windows can handle about 125 embryonic conns at any one time. Therefore, we usually recommend setting the max embryonic connections to something below 125 for Windows hosts - 110 is usually a good place to start. Other OS's can handle more or less embryonic connections. You should be able to find this information from the OS vendor but if we can help anymore, please let us know.</P><P></P><P>Scott</P></BODY></HTML> Wed, 23 Jun 2004 19:25:26 GMT https://community.cisco.com/t5/network-security/pix-reccomendation-on-max-embryonic-connections/m-p/277742#M564497 scoclayton 2004-06-23T19:25:26Z