Guest User!

You are not Sophos Staff.

Thread Info
  • State
  • Locked Locked
  • Replies 1 reply
  • Subscribers 4 subscribers
  • Views 3277 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Concurrent connections

DrMeskon

Hi,
we have Sophos SG 330 and periodically experiencing some type of flood. Concurrent connections are increasing 3 times for short period. Which log in firewall displays this behaviour? Concurrent connections are connections which completed 3 way handshake or are also half way connections?



This thread was automatically locked due to age.
Parents
  • 0

    It would make sense that a TCP connection would be counted as soon as the SYN packet is received, Almis, as UDP connections have no handshake.

    Show a picture of the Concurrent Connections graph and say whether there's any anti-flooding activity in the Intrusion Prevention log.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    It would make sense that a TCP connection would be counted as soon as the SYN packet is received, Almis, as UDP connections have no handshake.

    Show a picture of the Concurrent Connections graph and say whether there's any anti-flooding activity in the Intrusion Prevention log.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML