Flooding resistance

[mattob]

Hi all

We are running a really old version of firewall 4.1. I know, it is embarrassing, but hey, it is not my decision, it is my job, ok? So no question like why don't you update!?

We are getting flooded by a lot of packets that are getting dropped. So there is no usage of connection table. However, I was having a discussion with my boss about the potential to bring down our firewall.
He reckons, it does not depend on the fact that connection table remains untouched and eg. 10000 dropped packets a minute could bring the firewall down (although they are being dropped)

What do you think?

Mattob