Hi Guy,
recently we facing the issue which the alert of
"IP:syncookie proxy inbound activated"
from the alert tab. i not sure which is the flow cause this. i try to simulate with our R&D unit with the configure as below:
from the show flow output which of the entry is cause the Event is active?
because is R&D unit. i try to put 3 for the therhold only.
i attach the screenshot here as well.
thank you