Configuring IP Spoof and DoS Protection without Blocking Outbound Internet Traffic

Question

Hello Team, 
 I hope this message finds you well. I am writing to seek your assistance regarding a configuration issue I am facing with our sophos xgs firewall setup. 
 We have recently configured traffic flow and firewall rules for inbound and outbound traffic across multiple VPCs. As part of our ongoing security enhancements, we aimed to enable IP spoofing and Denial-of-Service (DoS) protection features on the firewall. However, upon enabling these settings, we encountered an issue where outbound traffic to the internet was unexpectedly blocked. Attaching the configuration SS for your reference. Thank you in advance.

Mayur Makvana · Answer

Hello, 
 Thank you for contacting Sophos community. 
 It is suggested to disable the TCP flood, we may not be able to control or identify how many tcp packets would be generated or you may set the higher value.