DescriptionThe thresholds (Inbound and Outbound) for the most commonly used ports such as HTTP, FTP, DNS, etc are not set when applying the Sytem Recommendation settings, even if the traffic statistics during the learning period have detected traffic on these ports. This means that the thresholds for those ports are set to the maximum value of 134217727.
This is to ensure that no false-positive will happen because the threshold on the port has been set too low. This should not at that level that the migration should happen. The attack catch-up will be triggered by others means such as source tracking, anomaly in IP or l4 level, Syn flood mitigation, L3 or L7 thresholds, etc.
ScopeFortiDDoS v4.1 and above.
SolutionOnly add value to these thresholds if a specific issue needs to be addressed.
