This read-create INTEGER sets the maximum number of connections per second allowed from a given source IP address and port list before the device treats it as a SYN attack. Admins care because tuning this threshold to the server's normal traffic pattern balances detection sensitivity against false positives. For example, an admin sets this to 100 for a web server's protected IP/port pair, so once SYN connections from a single client exceed 100 per second, the device flags it as an attack.