Impact on Existing Functionality

The TCP SYN attack feature is affected because of TCP MSS adjustment. Both features look for the same fields in the packet, so either one of the ACL rules can be hit.

Because TCP MSS adjustment has built-in rate limiting applied, it can be viewed as a superset. Higher priority is given to TCP MSS adjustment when both features are configured on a Layer 3 interface.