Hello,
I have run into an issue with DoS settings on our company's XG550 (running 18.5.4 MR-4).
I wanted to enable DoS protection on it, so i setup a netflow server to send all netflow data to it so i could estimate the needed packet rates. And after a week i had a good baseline of data to start testing the feature.
But the issue is that Sophos does not allow to input anything above 600000 in the source or destination fields and gives out an error message: "You must enter a value between 1 and 600000 packets/minute for "Packets rate""
To me this does not make any sense, because i have legitimate user/server traffic that easily tops 600000 packets/minute even if i create bypass rules to allow my internal networks to bypass dos settings to any destination.
And furthermore, for a device like the XG550 where the datasheet states it can handle 213,800 new connections a second 600k a minute is nothing.
Does maybe anyone have a workaround for this? Or maybe a timeline from Sophos when this packet limit could be raised?
Thank you.
This thread was automatically locked due to age.
