Which ban for DoS protection will enforce a rate limit for users who are unable to post five (5) “. tar.gz" files within five (5) seconds?

In WAAS DoS protection, Average rate is calculated over a rolling 5-second window. Setting an average rate of 5 with a file-extension matcher for “.tar.gz” therefore blocks any client that tries to upload five such files within that 5-second period. Burst rate is evaluated in a 1-second window and would not meet the 5-second requirement; CNNF DoS rules apply only to network traffic, not file uploads.

B. CNNF rate limits network sessions, not HTTP file uploads inspected by WAAS.
C. Burst rate is measured over one second, so it cannot enforce a 5-second limit.
D. CNNF burst rules again apply only at the network-firewall layer, not WAAS file-level checks.

1. Prisma Cloud Compute Admin Guide

“WAAS > DoS Protection”

Table ‘Average Rate vs. Burst’

note 2 (Rev 23.10).

2. Prisma Cloud Compute Admin Guide

“Cloud Native Network Firewall”

section “DoS Rules”

para 3 (Rev 23.10).