Fortinet black logo

Handbook

Step 8: Generate traffic statistics and set the configured minimum thresholds

Copy Link
Copy Doc ID 369dfb00-033f-11ed-bb32-fa163e15d75b:868211
Download PDF

Step 8: Generate traffic statistics and set the configured minimum thresholds

At the end of the initial learning period, you can adopt system-recommended thresholds (usually lower than the factory default).

Basic steps
  1. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and generate statistics for the selected time period.
  2. 2. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and review the maximum packet rates generated for the SPP. The values represent the maximum packet rate observed during the selected period. For example, during each 1-hour period, there are 12, 5-minute observation periods. FortiDDoS captures a maximum rate for each 5-minute interval. The generated threshold is the highest maximum rate that was captured among the 12 observation periods.
  3. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and set the configured minimum thresholds to the system recommended settings.

For each OSI layer you can specify two settings:

  • Percentage: The configured minimum threshold is the generated baseline rate multiplied by this percentage.
  • Low Traffic Threshold: The system uses this value instead for the configured minimum threshold if it is higher.
  • Outbound Thresholds to MAX: When enabled, sets all outbound thresholds to factory defaults irrespective of system recommendation values

Tip: When you are getting started, we recommend that you accept the defaults for the adjustment percentages and low traffic thresholds.

For details, refer to the following sections:

Step 8: Generate traffic statistics and set the configured minimum thresholds

At the end of the initial learning period, you can adopt system-recommended thresholds (usually lower than the factory default).

Basic steps
  1. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and generate statistics for the selected time period.
  2. 2. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and review the maximum packet rates generated for the SPP. The values represent the maximum packet rate observed during the selected period. For example, during each 1-hour period, there are 12, 5-minute observation periods. FortiDDoS captures a maximum rate for each 5-minute interval. The generated threshold is the highest maximum rate that was captured among the 12 observation periods.
  3. Go to Service Protection > Service Protection Policy > {SPP rule} > Threshold Settings > System Recommendation and set the configured minimum thresholds to the system recommended settings.

For each OSI layer you can specify two settings:

  • Percentage: The configured minimum threshold is the generated baseline rate multiplied by this percentage.
  • Low Traffic Threshold: The system uses this value instead for the configured minimum threshold if it is higher.
  • Outbound Thresholds to MAX: When enabled, sets all outbound thresholds to factory defaults irrespective of system recommendation values

Tip: When you are getting started, we recommend that you accept the defaults for the adjustment percentages and low traffic thresholds.

For details, refer to the following sections: