Pa-5220 DoS and Zone protection

[JeffKim]

We have set Dos and Zone Protection and We have default value

My concern is how can I mitigate the attack and how can we allow legitimate traffic as possible as we can.

[JeffKim]

Anyone give me a feedback why we had those error log even we couldn't find CPS reached at alarm rate ?

[panwreaper]

@JeffKim  you shouldn't implement Zone Protection with default values.... you should first baseline your network so you can adjust the settings to what is normal for your network

[JeffKim]

Thanks Panwreaper ,

I know what do you say , but it is not answer about my question.

Thanks ,