TMS zl Management and Configuration Guide ST.1.0.090213

4-103
Firewall
Resource Allocation
The following is therefore true:
Figure 4-69. Outbound Connection Reservation Implication
■ When the total active connection threshold of 39,500 (40,000 – 500) is
reached, the module will not permit any more connections into the
External zone unless the connections are initiated by hosts with IP
addresses in the 10.1.1.11–10.1.1.60 range.
Figure 4-70. Outbound Connection Reservation Implication
■ If the number of non-reserved connections to the External zone reaches
the limit of 10,000, the module will set aside 500 connections from the
other zones’ connection limits, provided that enough connections are
available in the other zones. For example, if there are 1500 total connec-
tions left for all three of the other zones, 500 of these will be set aside.
Then only 1000 total connections are available for the other zones.