secure a TCP service (non HTTPS)

[Daniel_Kavan]

Hi,

We have software that runs on a TCP high port that we want to secure more.  So, for the object I can't check that its a web server.     Is there any way to lock the service down more.    Customers connect to the port with software and then do their work.  Sometimes we run into a situation where users can't connect.  It's hard to white list this traffic but that seems like it would be an ideal solution.    When we get "attacks" its really in the form of people trying to connect over and over  creating a DoS effect for legitimate users.

[PhoneBoy]

What specifically is blocking the traffic in the gateway?

[Daniel_Kavan]

Nothing, the server behind the gw is being overwhelmed.  I'm looking for ways to limit the amount traffic hitting the gateway based on TCP traffic.  IPS is the best defense, but I'm wondering if I can do more.

[PhoneBoy]

Your best bet is to rate limit traffic.
You could do this with QoS or using our DDoS mitigation mechanisms.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...