Pix connection limit settings don't take affect?

#Note that in the case where it isn't working, the global is not assigned to an interface it's simply another public block routing through the outside interface. Could that be it?

running 7.2(4)

static (dmz,outside) x.x.x.x 192.168.2.220 netmask 255.255.255.255 tcp

500 100 udp 500 #limits show up here # sh local-host 192.168.2.220 Interface failover: 1 active, 1 maximum active, 0 denied Interface dmz: 4 active, 5 maximum active, 0 denied local host: , TCP flow count/limit = 2/500 TCP embryonic count to host = 0 TCP intercept watermark = 100 UDP flow count/limit = 17/500

static (dmz,outside) x.x.x.x 192.168.2.210 netmask 255.255.255.255 tcp

500 250 udp 500 #limits don't show up here # sh local-host 192.168.2.210 Interface failover: 1 active, 1 maximum active, 0 denied Interface dmz: 4 active, 5 maximum active, 0 denied local host: , TCP flow count/limit = 27/unlimited TCP embryonic count to host = 0 TCP intercept watermark = unlimited UDP flow count/limit = 0/unlimited
Reply to
linguafr
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.