permitting/denying asymetric TCP flows at the VYSY level?

[CMG]

Can "set deviceconfig setting session tcp-reject-non-syn no" or similar somehow be configured at just the VSYS level?  ( I know it functions at the device level)

So as to provide some VSYS's the ability to process asymetric flows and others not.

Regards,

[UhMayYeah]

Its a global/system level setting  and is not available per vsys.

[emr_1 · Accepted solution]

How about zone level?

You can configure it under zone protection configuration.

Regards