cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
491
Views
5
Helpful
4
Replies

Limiting number of connections

jeansamarani
Level 1
Level 1

Hi All,

is there any feature in the PIX firewall that limit the number of connections to a given host ?

thanks

Jean

4 Replies 4

trevora
Level 1
Level 1

There are 2 ways you can do this.

if you are using static nat then there are options that you add:

static (inside,outside) 1.1.1.1 2.2.2.2 70 50

= 70 Max connections and 50 embryonic

The more recent way is via policy:

class-map MYCLASS

match any

policy-map MYPOL

class MYCLASS

set connection {conn-max number | embryonic-conn-max number |

per-client-embryonic-max number | per-client-max number | random-sequence-number {enable |

disable}}

set connection timeout {tcp [reset]] [half-close ]

[embryonic ] [dcd [ [max-retries]]]}

service-policy MYPOL interface outside

you mentioned about Pix, so make sure it runs 7.x as MPF is supported only 7.x onwards

but what's the difference between the max connection parameter and the embryonic value?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: