The Failure and warning limits operate at layer 7, and only currently work for HTTP. If the ProxySG starts seeing a large number of HTTP errors, or TCP connection failures, and that number exceeds the configured error limit, the proxy will start blocking subsequent requests and will return a warning page.
If the requests continue despite the warnings, and the rate exceeds the warning limit, we will block the client at the IP stack.