Zone Protection profiles applied to zones offer protection against most common floods,
reconnaissance attacks, and other packet-based attacks.
Zone Protection profiles provide additional protection between specific network zones in
order to protect the zones against attack. A Zone Protection profile applied to a zone
offers protection against most common floods, reconnaissance attacks, other packet-based
attacks, the use of non-IP protocols, and headers with 802.1Q (EtherType 0x8909) that
have specific Security Group Tags (SGTs). A Zone Protection profile is designed to
provide broad-based protection at the ingress zone (the zone where traffic enters your
configuration) and isn't designed to protect a specific end host or traffic going to a
particular destination zone. You can attach one Zone Protection profile to a zone.
