RulePerSecondLimit Property of the IFPCConnectionLimitPolicy Interface

Article
08/13/2010

The RulePerSecondLimit property gets or sets the maximum number of connections that can be created for a rule during one second.

C++

HRESULT put_RulePerSecondLimit(
    long lLimit
);
HRESULT get_RulePerSecondLimit(
    long* plLimit
);

Parameters

lLimit
A 32-bit integer that specifies the maximum number of connections that can be created for a rule during one second.
plLimit
Pointer to a variable that on return receives a 32-bit integer specifying the maximum number of connections that can be created for a rule during one second.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Visual Basic

Property RulePerSecondLimit As Long

Property Value

A 32-bit integer that specifies the maximum number of connections that can be created for a rule during one second.

Remarks

This property is read/write. Its default value is 1000, and its range of permissible values is from 100 through 9,999,999.

When the number of connections created for a specific rule during the current second reaches the limit set by this property, Forefront TMG will not create another connection for new traffic that has no connection associated with it, the packets will be dropped, and an event will be generated. After the current second passes, the counter is reset, and new connections can be created during the next second until the limit is reached again.

Connections created for TCP traffic are not counted against the maximum number of connections that can be created for a rule during one second. Land attack detection can be enabled for TCP traffic. For more information, see LandAttackDetectionEnabled.

In Forefront TMG Management, the value of this property determines the Maximum new non-TCP sessions per minute per rule setting on the Flood Mitigation page after adjustment for the difference in time units.

Requirements

Client	Requires Windows 7 or Windows Vista.
Server	Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2.
Version	Requires Forefront Threat Management Gateway (TMG) 2010.
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.

Share via