Source IP connection limits

Question

I am running a Cisco ASA 5550 in active/standby mode.  We are currently running ASA OS v8.2(3)5.  I am wondering if there is a way I could limit source IP concurrent connections coming in my outside interface.  Does the ASA have a feature/ACL syntax that supports this?

Answer 1

Hello,
You can try this with a MFP, creating ACL to match the traffic, create a calss-map to match the ACL, then a polici map to set the class-map wit the feature conn-max, and placing the policy-map on the outside interface.
Here is a configuration example:
access-list  test permit ip host X.X.X.X host Y.Y.Y.Y
  class-map test
  match access-list test
  policy-map test
  class test
  set connection conn-max " <0-65535>  Enter the maximum number of simultaneous connections"
  service-policy test interface "outside
Let me know if this works for you.