Embryonic Limit Very Well Exceeded

ccan · ‎01-01-2008

Hi,

I have PIX 501 with 10 Embryonic connections allowed. During some of the SYN attacks, PIX responds to late. Resulting log shows figures like 500/10 which means that it stopped the offending connection after 500 embryonic connections instead of 10. Is there something I can do so that I get 10/10 logs again?

Thanks.

rajbhatt · ‎01-02-2008

HI,

Try and change the default embryonic conenction timeout .

Raj

ccan · ‎01-02-2008

Thanks Raj,

However, I can not find the place to configure that. Which command should I use?

Can