how can i limit the Maximum Number of connections per ip

[Kumasan]

Hi everyone 

                    i have a question is how to limit the maximum number of sessions per ip or per zone ?  

                    hope someone can help me.

[Raido_Rattameister]

This can be done with DoS protection.

https://live.paloaltonetworks.com/t5/Tutorials/How-to-Set-Up-DoS-Protection/ta-p/71164

Also check out zone protection.

In general you apply broad zone protection and then use DoS protection to be more specific for specific IP or subnet.

[BPry]

@Kumasan,

Specifically within zone protection and DoS policies you are going to want to look at the Resources Protection tab. 

[Kumasan]

@BPry,

             thanks for your reply .  in my opinion ,the maximum concurrent sessions in zone protection profiles  which is limit  the total number of session in this zone , not session  per ip . Is it correct or not ?

[reaper]

the maximum concurrent sessions in zone-protection are a total cumilative for the entire zone

in dos-protection the aggregate functions for all cumulative sources towards a single destination and the classified functions as a per source per destination limitation