How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall.

Gururaj — Mon, 09 Oct 2017 07:16:14 GMT

Hi,

We have implemented the PaloAlto firewall through which traffic is passing without any issues. Now we want to enable DoS protection and we assume that the current traffic passing through firewall is legetimate.

I need your help to understand and obtain the below values.

How to get packets per second value for the traffic entering the particular interface of the firewall ( To set aggregate DoS Profile).
How to get packets per second value for the traffic passing through the firewall for particular destination ( To define classsified DoS profile).

Thank you,

Guru

Re: How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall.

kiwi — Mon, 09 Oct 2017 07:35:22 GMT

Hi @Gururaj,

Check out the following :

How-to-Check-Throughput-of-Interfaces

Alternatively you could install the Chrome plugin called Pan(w)achrome for a more visual output :

Get-more-GUI-functionality-using-Pan(w)achrome

I don't think these tools allow you to filter on a particular destination but I'm guessing that you can get that info from the ACC stats in the 'Destination IP Activity' widget.

I hope this helps !

-Kiwi.

topic How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall. in General Topics

How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall.

Re: How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall.