This can NOT be done with Floodgate (QoS). I've asked checkpoint TAC about this, even with NGx R65. The workaround is to use "rate-limit" in Cisco upstream router. In other words, it can be done with Cisco IOS, either with rate-limit or NBAR.
Chris van der Merwe <[EMAIL PROTECTED]> wrote: Hi, Thanks I checked the Advanced options, but also there, there is no way to limit the actual amount of connections allowed - only the amount of bandwidth that will be allocated to each connection. Any other ideas how I can restrict the number of concurrent connections allowed from each client to a specific server or service. Thanks > I noticed the new simple QoS configuration lacks of settings regarding > connections, but on the old "Traditional QoS" configuration there is an > "advanced" option, that allowed you to configure limits and guarantees per > connection, which combined with bandwidth limits per rule would allow you to > decide how many connections would be allowed to a particular destination. > > Honestly I have never had to do anything like that, but sounds to me like > it would be possible. > > To change to the Traditional QoS go: Policy>Convert to...>Traditional QoS. > > You should be able to find more details in the QoS Admin Guide pdf, you can > get on your installation disk or download from the Check Point website. > > Regards > > On Jan 10, 2008 4:07 AM, Chris van der Merwe wrote: > > > Hi Guys, > > > > Thanks for all the help so far! We would like to configure QoS/FloodGate > > to limit the number of simultaneous connections that an external host can > > make to a group of, or single internal server. So far in FloodGate/QoS I > > have only seen the possibility to assign a weight, set the throttle > > bandwidth or guarantee a bandwidth. This of course would not limit the > > actual number of connections. Any ideas? > > > > Thanks > > Chris > > > > > > _________________________________________________________________ > > Get the power of Windows + Web with the new Windows Live. > > http://www.windowslive.com?ocid=TXT_TAGHM_Wave2_powerofwindows_012008 > > > > > > Scanned by Check Point Total Security Gateway. > > > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > > -- > Sergio Alvarez > (506)8301342 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= _________________________________________________________________ Get the power of Windows + Web with the new Windows Live. http://www.windowslive.com?ocid=TXT_TAGHM_Wave2_powerofwindows_012008 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= --------------------------------- Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
