Source and Destination class-based firewall filter actions

You can apply firewall filters actions like drop, reject, sample, and police on packets classified by source class usage (SCU) and destination class usage (DCU) accounting, for example as part of a design to provide distributed denial-of-service (DDoS) protection to customers.