topic Rate limit port forwards in General Topics

Rate limit port forwards

daraco — Mon, 30 Jun 2014 06:16:55 GMT

Hey guys,

Some of the iptables servers I'm replacing with Palo Alto firewall provide port forwards to RDP servers. In order to prevent abuse, they were rate limited, such that a single IP can only connect a few times before being blacklisted for a few minutes.

This functionality existed within IP tables - is there a way to replicate this within a PA-200?

Re: Rate limit port forwards

HULK — Mon, 30 Jun 2014 06:44:37 GMT

Hello Daraco,

You may try a DOS protection profile ( GUI > Profiles > Security Profiles > DOS) to rate connection and block for a specific time interval.

Reference DOC:Threat Prevention Deployment Tech Note

Thanks