Denial of DOS Attack

[saquib.tandel]

Hello

How to overcome "Denial of DOS Attack" on ASA 5510, any recommendations or best practises

Considering the public ip is not same all the time.

thanks

Saquib

[jdlampard]

I'll assume you don't have the CSC-AIP module, no?

Maybe the 'ip audit' and 'threat-detection' commands can help.

[Kureli Sankar]

You can limit per-client max and enable per-client-embryonic-conn-max but, the best place to stop this is before it reaches the outside interface.

Engage your ISP.

Here is the link for per-client-max and embryonic-max:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s1.html#wp1424045

-KS