This INTEGER selects the TCP proxy switch mode for SYN flood defense in this zone: auto(1) lets the firewall decide when to engage proxying, on(2) forces it always on, and off(3) disables it, with auto(1) as the default. Admins choose on(2) for zones under persistent attack where proxying should always be active, or off(3) to disable the defense entirely for testing. For example, setting hwAtkZoneSynFloodProxy to on(2) forces the firewall to always intercept and proxy TCP handshakes for hosts in that zone, regardless of the measured SYN rate.