Massive flooding port 8116

[Aviv_Kedem]

Hello community,
I see in several sites many drops when port 8116 flooded heavily. It income to vlan1 and dropped.
Should I create some filter for ge1 of the aps to avoid unnecessary overliad on the equipment?

Thanks

Aviv

[Tomasz]

Hi Aviv,

I believe you should be able to rate limit BUM (broadcast, unknown unicast, multicast) traffic on that VLAN. Are other VLANs also affected?
What is the purpose of port 8116 usage by Checkpoint? I would recommend to use some Policy or ACLs to limit 8116 communication only in a VLAN and at a rate it should be allowed to not interfere with other devices.

Hope that helps,
Tomasz

[Aviv_Kedem]

Thanks Thomas

[Aviv_Kedem]

The flooding is by Check Point Security Gateway.

Waiting for any suggestions.

Thanks

Aviv

[Aviv_Kedem]

What ?