If SecureXL is enabled the best way to do this is using the Rate Limiting feature described in the R77 Security Gateway Technical Administration Guide. Command is fw samp add quota as shown here:
![](/legacyfs/online/checkpoint/61201_samp.jpg)
Using the IPS Network Quota signature will work as well, but will pretty much eliminate any chance of SecureXL accelerating anything whatsoever on the firewall.
--
My Book "Max Power: Check Point Firewall Performance Optimization"
Second Edition Coming Soon
Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com