Forum Discussion

etherchannel01's avatar
etherchannel01
Icon for Nimbostratus rankNimbostratus
Jan 11, 2023

DoS Profiles

If I assign the same DoS profile to provide application protection for all my virtual servers is automatic threshold learning done at the virtual server level or is it applied to the overarching poli...
security
  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Jan 11, 2023

    Hi etherchannel01 , 
    It is Not Recommended at all , 
    you should separate all security profiles for each virtual server specially Dos or Bot Defense profiles. 

    I say that to prevent a huge headache in troubleshooting in issues. 
    Also this separation on Dos profiles level will give the availability to configure all Dos profile features such as heavy urls and so on. 

    Anyway , it’s not recommended to group all virtual servers in one Dos profile , this is my opinion. 

Sebastiansierra's avatar
Sebastiansierra
Icon for MVP rankMVP
Jan 11, 2023

Hi,

Each Application has different behavior and traffic processing, if you use an automatic threshold with many applications to create a DDOS profile, it could extend the threshold to some application that doesn´t need it, I recommend you create a DDOS Profile for each application Virtual Server, this automatic process will take the maximum threshold of all Virtual Servers that have applied this profile.

Hope it´s works.