Table of Contents
Advertisement
5.2.2 Sessions Limit
To prevent ill-behaved clients or malicious software from using up the system's connection resources, the
administrator can restrict the number of concurrent sessions that a user can establish.
The maximum number of concurrent sessions (TCP and UDP) for each user can be specified in the Global
policy, which applies to authenticated users, users on a non-authenticated port, privileged users, and
clients in DMZ zones. Also this can be specified in the other policies to apply to the authenticated users.
When the number of a user's sessions reaches the session limit (a choice of Unlimited, 10, 25, 50, 100,
200 and 300), the user will be implicitly suspended upon receipt of any new connection request. In this
case, a record will be logged to a Syslog server.
Since this basic protection mechanism may not be able to protect the system from all malicious DoS
attacks, it is strongly recommended to build some immune capabilities (such as IDS or IPS solutions) in
network deployment to maintain network operation.
133
Advertisement
Table of Contents
