topic tap zone and ddos profile in General Topics

tap zone and ddos profile

sib2017 — Tue, 29 Mar 2016 07:41:36 GMT

Hi,

I have created tap zone and created policy under security policies .
In my ddos profile there are two policies one for trust zone another one for untrust zone

if I create another policy for tapzone , is it a good creating another ddos policies for tap zone

if yes how can i do that ?
Thanks

Re: tap zone and ddos profile

rmonvon — Tue, 29 Mar 2016 13:41:10 GMT

Since you have a tapzone, we can assume the PA is deployed in tap mode where actions are recorded but not enforced with DoS profile. You will need to define another DoS Protection rule to match on the tapzone and apply the DoS profile to this rule. Or you can enable zone protection on the tapzone.