Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Collaborator

Aggressive aging setting for tcp and udp against ddos

Hello

i want to make setting to resist ddos. what is your  suggestion?for example what should be tcp and udp aggresive aging setting?

Thanks

0 Kudos
3 Replies
Highlighted
Advisor

Hi,

CheckPoint has a sk about "Best Practices - DDoS attacks on Check Point Security Gateway". It includes settings for aggresive aging. 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

0 Kudos
Highlighted
Collaborator

hi i know this sk. but these values are default values. i want to learn what  is the best values?

0 Kudos
Highlighted

My guess is that this value should be modified according to the size of the appliance  on the site that you are intending to protect , modifying tcp timeout can and will impact performance

0 Kudos