This counts HTTP requests the gateway blocked for having an oversized header. Like the URL-length check, oversized headers are commonly used to attempt buffer-overflow exploits or to smuggle requests past less careful inspection devices, so this counter is a proxy for that class of attack against the organization's web servers. For example, a crafted request with an abnormally large cookie or referer header aimed at a vulnerable web application getting blocked and tallied here.