Baseline Procedure for DOS Prevention

[dbrenipc]

Hello everyone,

I was looking at setting up the DOS profile/protections on a PA-3020.  I obviously need to baseline the traffic/system and was curious if there are

any docs, Perhaps hidden, that would help me in this.

Essentially I will need to grab stats.  I realize Cacti can do this, but my customer does not have any available tools. : (

thank you in advance,

Don

[pulukas · Accepted solution]

You have probably seen the two main documents here.

Understanding DoS Protection

Understanding DoS Logs and Counters

Without actual data gathered before hand, I would start by turning on features that can be done so in alert mode and monitoring the logs every few days.  Once the appropriate levels are obvious then converting to drop.

[dbrenipc · Accepted solution]

Thank you very much..

There's no shortcut : )

Don