how can i limit the Maximum Number of connections per ip

[Kumasan]

Hi everyone 

                    i have a question is how to limit the maximum number of sessions per ip or per zone ?  

                    hope someone can help me.

[Raido_Rattameister]

This can be done with DoS protection.

https://live.paloaltonetworks.com/t5/Tutorials/How-to-Set-Up-DoS-Protection/ta-p/71164

Also check out zone protection.

In general you apply broad zone protection and then use DoS protection to be more specific for specific IP or subnet.

[BPry]

@Kumasan,

Specifically within zone protection and DoS policies you are going to want to look at the Resources Protection tab. 

[Kumasan]

@BPry,

             thanks for your reply .  in my opinion ,the maximum concurrent sessions in zone protection profiles  which is limit  the total number of session in this zone , not session  per ip . Is it correct or not ?

[reaper]

the maximum concurrent sessions in zone-protection are a total cumilative for the entire zone

in dos-protection the aggregate functions for all cumulative sources towards a single destination and the classified functions as a per source per destination limitation

[BPry]

@Kumasan,

Reaper already gave you the information you were looking for. 

I'm a big supporter of utilizing all of the possible scenarios when it comes to actually securing your network. If you have a reason to utilize zone protection you likely also have a reason to enabel DoS protection profiles. Zone Protection by nature will be very high-level protection as you have to set the limits within reason to not interupt normal traffic flow; with DoS profiles you can get way more granular and properly secure hosts instead of just the zone. I highly recommend utilizing both. 

[ThomasX]

No answer ... my customer ask me this configure 😞

[tamilvanan]

Hope this below post link answers your query:

https://live.paloaltonetworks.com/t5/general-topics/is-it-possible-to-limit-concurrent-session-per-z...