A Zone Protection profile applied to a zone offers protection
against most common floods, reconnaissance attacks, other packet-based
attacks, the use of non-IP protocols, and headers with 802.1Q (Ethertype
0x8909) that have specific Security Group Tags (SGTs). A Zone Protection
profile is designed to provide broad-based protection at the ingress
zone (the zone where traffic enters the firewall) and is not designed
to protect a specific end host or traffic going to a particular
destination zone. You can attach one zone protection profile to
a zone.
