user@host# set security screen ids-option syn-frag tcp syn-frag user@host# set security zones security-zone zone screen syn-frag