Resolved! permitting/denying asymetric TCP flows at the VYSY level?
Can "set deviceconfig setting session tcp-reject-non-syn no" or similar somehow be configured at just the VSYS level? ( I know it functions at the device level)
So as to provide some VSYS's the ability to process asymetric flows and others not.
Regard
...