How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections.
parameter-map type inspect DoS max-incomplete low 20 max-incomplete high 200 one-minute low 100 one-minute high 1000 tcp max-incomplete host 5 block-time 3 sessions maximum 2147483647 class-map type inspect match-any IN_OUT_PROT match protocol tcp match protocol udp match protocol icmp match protocol ssh match protocol ftp match protocol tftp class-map type inspect match-any OUT_IN_PROT match protocol tcp match protocol ssh match protocol ftp policy-map type inspect IN_OUT_policy class type inspect IN_OUT_PROT inspect class class-default policy-map type inspect OUT_IN_policy class type inspect OUT_IN_PROT inspect DoS class class-default ! zone security IN description local network zone security OUT description external network zone-pair security IN_OUT source IN destination OUT service-policy type inspect IN_OUT_policy zone-pair security OUT_IN source OUT destination IN service-policy type inspect OUT_IN_policy interface FastEthernet0/0 ip address 192.168.100.1 255.255.255.0 zone-member security IN duplex auto speed auto ! interface FastEthernet0/1 ip address 192.168.200.1 255.255.255.0 zone-member security OUT duplex auto speed auto