Threat protection threshholds

[scottwclarke]

Hi all,

I have a client who is trying to stress test a site by making around 800 connections from a single IP address, Obviously the ASA sees this as a attack and starts dropping connections.

This morning this was proven by disabling Threat detection at which point all was OK. However no one is comfortable with extended testing with TD off. Could anyone tell me what the threshholds are for threat detection to start dropping packets. I have searched with google but no joy.

Thanks in advance,

Scott

[andrew.prince]

What device and IOS version are you using?

[suschoud · Accepted solution]

Issue :

sh run all | include threat-detection

Change the defaults as necessary.

Do rate helpful posts.

Regards,

Sushil