Who rated this post

When it comes to having the firewall efficiently drop floods of traffic, I've always been partial to the SecureXL Penalty Box.  Good logging and easy to understand: sk112454: How to configure Rate Limiting rules for DoS Mitigation (R80.20 and higher)

The "Optimized Drops" feature to dynamically form drop templates always seemed a bit clunky to me as it couldn't offload drop templates for complex objects such as Dynamic Objects, and those specific drops still had to happen on a Firewall Worker Instance core.  The logging and monitoring was also not very good. However in R81.20 the Optimized Drops feature got some updates to make it more compatible with SecureXL, and also improved the monitoring/logging.  Haven't had a chance to try it yet but looks promising:  sk175006: Firewall Drop Templates in R81.20 and higher