You can specify the connection direction of the attack. Using
a single direction (instead of Any) improves performance,
reduces false positives, and increases detection accuracy.
Client to server (detects the attack only in client-to-server
traffic)
Server to client (detects the attack only in server-to-client
traffic)