Forum Discussion
What_Lies_Bene1
Oct 23, 2012Cirrostratus
They don't seem to be popular but have you considered a packet filter? You won't be able to send a response to denied clients but in this case it would be far more efficient and minimise your exposure to DDoS attacks. Alternatively, if your internal and Internet clients connect via different VLANs, you could remove the VS from the 'public' VLAN.