limit the number of connections to a service

[ddufault]

I need to limit the amount of connections to an SSL based web server that we will be deploying in our DMZ. I believe this can be accomplished using the static command with the max_conns value. I am just looking for confirmation as I am still relatively new to PIX. Right now the value is 0 which I believe is unlimited. Is it really as simple as setting the value to 'n' where 'n' is the number of connections I want to allow???

[matthew.mohan]

Yes, editing the max_conns setting will limit the number of tcp_established connections. You don't, however, want to confuse max_conns with the embryonic setting which limits the number of tcp_syn sessions open. The syn sessions are unestablished. If your concern is security, you may want to limit the embryonic setting also.

[ddufault]

Perfect, thanks.