How to determine DoS Alert, Activate and Max thresholds (Packets/second) from PaloAlto firewall.

[Gururaj]

Hi,

We have implemented the PaloAlto firewall through which traffic is passing without any issues. Now we want to enable DoS protection and we assume that the current traffic passing through firewall is legetimate.

I need your help to understand and obtain the below values.

• How to get packets per second value for the traffic entering the particular interface of the firewall ( To set aggregate DoS Profile).
• How to get packets per second value for the traffic passing through the firewall for particular destination ( To define classsified DoS profile).

Thank you,

Guru

[kiwi]

Hi @Gururaj,

Check out the following :

How-to-Check-Throughput-of-Interfaces

Alternatively you could install the Chrome plugin called Pan(w)achrome for a more visual output :

Get-more-GUI-functionality-using-Pan(w)achrome

I don't think these tools allow you to filter on a particular destination but I'm guessing that you can get that info from the ACC  stats in the 'Destination IP Activity' widget.

I hope this helps !

-Kiwi.