The limitations of Custom Reconnaissance attack are listed below:
The maximum threshold count for Custom Reconnaissance attack is 255 for single-AID (type: port scan, host sweep, service sweep, and brute force).
A component attack can only be included in 10 Custom Reconnaissance attacks.
A minimum of 2 component attacks need to be added for a multiple-AID (type: fingerprinting) Custom Reconnaissance attack.
Maximum 5 component attacks can be added in a multiple-AID (type: fingerprinting) Custom Reconnaissance attack.
Maximum 300 Reconnaissance attacks (Trellix IPS and Custom) can be pushed to the Sensor.
Maximum 300 component attacks can be pushed to the Sensor.
Maximum 150 Custom Reconnaissance attacks can be added to the Custom Attack Editor.