Aggressive aging setting for tcp and udp against ddos

[Thecoder]

Hello

i want to make setting to resist ddos. what is your  suggestion?for example what should be tcp and udp aggresive aging setting?

Thanks

[ED]

Hi,

CheckPoint has a sk about "Best Practices - DDoS attacks on Check Point Security Gateway". It includes settings for aggresive aging. 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Thecoder]

hi i know this sk. but these values are default values. i want to learn what  is the best values?

[Marco_Valenti]

My guess is that this value should be modified according to the size of the appliance  on the site that you are intending to protect , modifying tcp timeout can and will impact performance