Configure Packet Buffer Protection

Enable packet buffer protection globally.
Select
Device
Setup
Session
and edit the Session Settings.
Select
Packet Buffer Protection
.
Define the packet buffer protection behavior:
Alert (%)
—When packet buffer utilization exceeds this threshold for more than 10 seconds, the firewall creates a log event every minute. Range s 0% to 99%; default is 50%. If the value is 0%, the firewall does not create a log event.
Activate (%)
—When packet buffer utilization reaches this threshold, the firewall begins to mitigate the most abusive sessions by applying random early drop (RED). Range is 0% to 99%; default is 50%. If the value is 0%, the firewall does not apply RED. If the abuser is ingressing a zone that has Packet Buffer Protection enabled, the firewall can also discard the abusive session or block the offending source IP address. Start with the default threshold and adjust it if necessary.
The firewall records alert events in the System log, and records events for dropped traffic, discarded sessions, and blocked IP address in the Threat log.
Block Hold Time (sec)
—Number of seconds a RED-mitigated session is allowed to continue before the firewall discards it. Range is 0 to 65,535; default is 60. If the value is 0, the firewall does not discard sessions based on packet buffer protection.
Block Duration (sec)
—Number of seconds a session remains discarded or an IP address remains blocked. Range is 1 to 15,999,999; default is 3,600.
Click
OK
.
Commit
your changes.
Enable additional packet buffer protection on an ingress zone.
Select
Network
Zones
.
Choose an ingress zone and click on its name.
Enable Packet Buffer Protection
in the Zone Protection section.
Click
OK
.
Commit
your changes.