user@host# set security screen ids-option tcp-no-flag tcp tcp-no-flag user@host# set security zones security-zone zone screen tcp-no-flag