Packet Forwarding Engine DDoS protection

You can configure and install policers at the Packet Forwarding Engine (PFE) level for defense from DDoS attacks. By default, DDoS protection is enabled for many protocols on devices. You can disable DDoS protection or change default policer parameters for a protocol group or supported packet types in a protocol group. You can also configure the bandwidth or burst limit at the protocol level.