Impact on Existing Functionality

The TCP SYN attack feature is impacted because of TCP MSS adjustment. Both features look for same fields in the packet, so either one of the ACL rules can be hit.

Because TCP MSS adjustment has inbuilt rate limiting applied, it can be viewed as a superset. Higher priority is given to TCP MSS adjustment when both features are configured on a Layer 3 interface.