Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Answers 3 answers
  • Subscribers 29 subscribers
  • Views 11680 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS DoS attack policies

Habib Yaqubi

Hello,

When i am enabling IPS DoS Policies, TCP Flood, UDP Flood, SYN Flood, i can't access admin portal of Sophos XG Firewall plus user browsing will stoped, I need your help.

 

Thanks

Habib



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Habib Yaqubi

    Hello ,

     

    For SYN, UDP and ICMP you only have to enable on Source.

     

     

    Regards, Ronak.

  • 0 in reply to Ronak Sheth

    Hello Ronak,

     Thank you for the below instructions, I have serious problem with Connection Sessions in Sophos XG Firewall, Let me first describe the our network layout, we have place Sophos Xg Firewall in front of Cisco ASA Firewall, in Cisco ASA Firewall we have limit the connection session of WAN IP of Sophos to 2000 session. but unfortunately we are facing the connection session exceed more than 2000, internet browsing will stop working till we clear the session from cisco ASA firewall, now we increased the session to 30000 which is very risky, it also being full. i don't know what is going on. i need to troubleshoot the issue, if you have any idea please let me know.

     

    Regard's

    Habib

  • 0 in reply to Habib Yaqubi

    Hi,

    2000 sessions seems a very small number, you really need to be running at least 20,000. Those figures also depend on the number of clients connecting.

    Ian