Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

limit the number of connections to a service

I need to limit the amount of connections to an SSL based web server that we will be deploying in our DMZ. I believe this can be accomplished using the static command with the max_conns value. I am just looking for confirmation as I am still relatively new to PIX. Right now the value is 0 which I believe is unlimited. Is it really as simple as setting the value to 'n' where 'n' is the number of connections I want to allow???

2 REPLIES
New Member

Re: limit the number of connections to a service

Yes, editing the max_conns setting will limit the number of tcp_established connections. You don't, however, want to confuse max_conns with the embryonic setting which limits the number of tcp_syn sessions open. The syn sessions are unestablished. If your concern is security, you may want to limit the embryonic setting also.

New Member

Re: limit the number of connections to a service

Perfect, thanks.

93
Views
0
Helpful
2
Replies