Limiting the Number of Connections on a Pix

[jason.drury]

On a Pix, is there a way to limit the number of connections (not just SYN) one host can make to mitigate a DoS attack? For example, don't allow an ip more then 100 connections in 1 second.

Or can this only be accomplished with a Top Layer type device?

Thanks,

Jason

[nkhawaja]

Hi,

Haven't heard about this feature yet. It may be on the roadmap. Cisco Routers do have rate limiting feature though.

Thanks

Nadeem