Destination class-based firewall filter actions

You can apply firewall filters actions like drop, reject, sample, and police on packets classified by destination class usage (DCU) accounting, for example as part of a design to provide distributed denial-of-service (DDoS) protection to specific customers.