The number of SYN segments received per second from a single
destination IP address before the security device begins dropping
connection requests to that destination. If a protected host runs
multiple services, you might want to set a threshold based on
destination IP address only - regardless of the destination
port number.