tap zone and ddos profile

[sib2017]

Hi,

I have created tap zone and created policy under security policies .
In my ddos profile there are two policies one for trust zone another one for untrust zone

if I create another policy for tapzone , is it a good creating another ddos policies for tap zone

if yes how can i do that ?
Thanks

[rmonvon]

Since you have a tapzone, we can assume the PA is deployed in tap mode where actions are recorded but not enforced with DoS profile.  You will need to define another DoS Protection rule to match on the tapzone and apply the DoS profile to this rule.  Or you can enable zone protection on the tapzone.