Event: Max TCP connections

Workload Security is configured to allow a maximum number of TCP connections to protected computers. When the number of connections exceeds the maximum, network traffic is dropped and Max TCP Connections firewall events occur. To prevent dropped connections, increase the maximum allowed TCP connections on the computer where the Max TCP Connection event occurs.

The intrusion protection module enables the network engine which enforces the allowed number of TCP connections.

1. In the Workload Security console, click Policies.
2. Determine which policy to configure to affect the computer in question. See Policies, inheritance, and overrides.
3. To open the policy that you want to configure, double-click the policy.
4. In the left-hand pane, click Settings and then click the Advanced tab.
5. In the Advanced Network Engine Settings area, if Inherit is selected clear the checkbox to enable changes.

6. Increase the value of the Maximum TCP Connections property to 1000000.

   Note that starting February 9, 2021, the default value for new tenants is 1000000. For tenants created before this date, the value needs to be updated manually.

7. Click Save.