> I don't believe the SSG does SYN proxy'ing, correct? It does indeed support that. Check in the "screen" options for SYN flood limit, as well as enable SYN-Cookie under "flow options". - Chris.