Vulnerability issues (for DDoS Attacks)

Products

• Clarity PPM On Premise

Issue/Introduction

For the vulnerability 150085 Slow HTTP POST and/or DDoS attacks it is a broadcom support cover task or it is out of scope? How is this applied for CA PPM, it is in NSA or in the Server.xml file?

Environment

Release : 15.6

Component : CA PPM APPLICATION

Resolution

The message received "Establish minimal acceptable speed rate establish absolute request timeout for connection with POST request Server"; could be avoid making changes through NSA GUI -> Properties-> Database-> Max connection = 1000 adding this value.