Flow identification and ACL L2 /L3/L4 filtering DDoS attack prevention, TCP attack prevention, SYN Flood, Broadcast/multicast/unknown unicast storm control Port isolation Security p