Scenario: Limit inbound connections

If you need to control the inbound connection requests made to your server, use an inbound admission policy.

Situation

Your Web server's resources are being overloaded by client requests entering your network. You are asked to slow incoming HTTP traffic to your Web server on the local interface 192.168.1.1. Quality of service (QoS) can help you restrict the accepted inbound connection attempts, based on connection attributes (For example, IP address) to your server. To achieve this, you decide to do an inbound admission policy, which will restrict the number of accepted inbound connections.

The figure shows your company and a client company. This QoS policy can only control traffic flow in one direction.

Figure 1. Restricting inbound TCP connections
Restricting inbound TCP connections

Objectives

To configure an inbound policy, you must decide whether you are restricting traffic to a local interface or a specific application and whether you are restricting it from a particular client. In this case, you want to create a policy that restricts connection attempts from Their_Company going to port 80 (HTTP protocol) on your local interface 192.168.1.1.

Configuration

These topics show how to create an inbound admission policy.

Related reference
Monitor QoS