Which setting allow a DOS protection profile to limit the maximum concurrent sessions from a source IP address?

Setting the type to Aggregate applies limits globally across all sources, not per individual source IP, and clearing the sessions box prevents defining any session limit.

Clearing the sessions box means no concurrent session limit is being set, making this option ineffective for limiting sessions.

For a DoS protection profile to limit concurrent sessions originating from a single source IP address, the 'Type' must be set to 'Classified' to apply policies on a per-source basis, and the 'Sessions' checkbox must be enabled to define and enforce a specific maximum concurrent sessions threshold for each classified entity. This combination ensures granular control over session limits per source IP.

Setting the type to Aggregate applies the DoS protection globally across all sources and destinations, rather than on a per-source IP basis, which is necessary to limit concurrent sessions from a specific source IP address.