NAT table full .

Unanswered Question
Jun 8th, 2010

Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.

All traffic is stopped ?

MR

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Tue, 06/08/2010 - 04:43

mrobert wrote:

Hi, what happens when the nat table (memory !) is full on a firewall module 4.0.

All traffic is stopped ?

MR

MR

As far as i know it should stop all new connections but still continue to pass traffic for connections that have already been setup in the xlate table.

Jon

Kureli Sankar Tue, 06/08/2010 - 04:45

Are you seeing port map translation creation failed messages in the syslogs?

If there is one attack host, trying to establish too many connections it can quickly exhaust the PAT pool.

If there are no more translations slot available then yes all new connections will fail.

-KS

Actions

This Discussion

Related Content