Beginning with Junos 12.1, customers can configure the TCP syn-flood with a white list to bypass  the check on certain traffic flow.

• Beginning with Junos 12.1, customers can configure the TCP syn-flood with a white list to bypass the check on certain traffic flow.
• This feature is useful, when customers have devices in the network, which make use of TCP traffic for availability check.
• In this situation, with the configuration of the white list, such traffic can bypass the TCP syn-flood check and avoid potential false alarms.

Start from JUNOS version 12.1, customer can configure TCP syn-flood with white-list to by-pass checking on certain traffic flow.

The following configuration command options is added:

[edit security screen ids-option screen1 tcp syn-flood]
[email protected]# set white-list ?
Possible completions:
  <name>                White-list name
[edit security screen ids-option screen1 tcp syn-flood]
[email protected]# set white-list wl1 ?
Possible completions:
  <[Enter]>            Execute this command
  |                    Pipe through a command
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
+ source-address       Source address
+ destination-address  Destination address
[edit security screen ids-option screen1 tcp syn-flood]