I don't know anything about firewalls. I wonder if the bandwidth was increased would it minimize a Denial of Service attack
They should be turning back ICMP packets and header-only HTTP requests before they even reach the network.