Working with Session Control (asg_session_control)
Check Point Maestro R80.20SP Administration Guide | 185
Below are some rule examples
Rule Example 1
src * dst 1.1.1.0/24 dport 67 proto 17 limit 20 limit_ongoing 1
This rule defines a limit of 20 new connections per second for traffic:
n
From all sources
n
To Network
1.1.1.0/24
n
To Port 67
n
Over Protocol
17
(UDP)
Rule Example 2
dst 1.1.1.1/32 dport 80 proto 6 limit 13
This rule defines a limit of 13 new connections per second for traffic:
n
From all sources
n
To Host
1.1.1.1/32
n
To Port
80
n
Over Protocol
6
(TCP)
Showing Session Control Statistics
Description
The
asg_session_control stats
command shows the session control rules.
Syntax
asg_session_control stats
Example
The output shows the session control rules for each Security Appliance and the connections dropped by
each rule.
1_01:
Rule ID Source
Destination
DPort PR
Limit Drops
Attempts
------- ------------------ ------------------ ----- --- ----- ------------- -------------
1
*
1.1.1.0/24
67
17
20
3
19
2
*
2.2.2.2/32
80
6
13
0
12
1_02:
Rule ID Source
Destination
DPort PR
Limit Drops
Attempts
------- ------------------ ------------------ ----- --- ----- ------------- -------------
1
*
1.1.1.0/24
67
17
20
0
19
2
*
2.2.2.2/32
80
6
13
2
13
