DoS Protection (Protect your DMZ server against TCP floods)
Create a new DoS Protection Profile
Protect your DMZ server against TCP floods
Offending traffic should trigger a DoS alarm after exceeding 300 CPS
At 500 CPS new sessions should start to be dropped
All new sessions should be dropped after crossing the 1000 CPS threshold
Traffic from the offending address should be blocked for 10 minutes
Limit the number of concurrent sessions to 1250
!
Enable protection
Offending packets originate from the outside interface (E1/2)
The server (192.168.57.31) listens on TCP ports 80 & 443