Enhancement in Resource Management

When the Layer7 packets such as ALG or User Firewall create flow sessions, you can control whether to drop the packet or forward the packet if resource is busy. Configure the security-service under the edit security forwarding-options hierarchy to implement the resource management. When you configure the security service as fail-open, the session skips the application level and forwards the packet. By default, the security service is fail-closed, and allows the session to drop at the application level. When you use fail-closed option, make sure set security forwarding-options security-service fail-open is not configured.