Rate limit port forwards

[daraco]

Hey guys,

Some of the iptables servers I'm replacing with Palo Alto firewall provide port forwards to RDP servers. In order to prevent abuse, they were rate limited, such that a single IP can only connect a few times before being blacklisted for a few minutes.

This functionality existed within IP tables - is there a way to replicate this within a PA-200?

[HULK]

Hello Daraco,

You may try a DOS protection profile ( GUI > Profiles > Security Profiles > DOS) to rate connection and block for a specific time interval.

Reference DOC:Threat Prevention Deployment Tech Note

Thanks