Activate Rate
—When new CPS exceeds
this threshold, the firewall begins to drop new connections to mitigate
the flood until the CPS rate drops below the threshold. For classified
profiles, the
Max Rate
should be an acceptable
CPS rate for the device(s) you’re protecting (the
Max
Rate
won’t flood the critical device(s)). You can set
the
Activate Rate
to the same threshold as
the
Max Rate
so that the firewall doesn’t
use RED or SYN Cookies to begin dropping traffic before it reaches
the
Max Rate
. Set the
Activate
Rate
lower than the
Max Rate
only
if you want to drop traffic before it reaches the
Max
Rate
. For aggregate profiles, set the threshold just
above the average peak CPS rate for the group to begin mitigating
floods using RED (or SYN Cookies for SYN floods).