Please see the article  How to configure TCP protection.