You can enable
Strict Cookie Validation
if you want
cookie validation performed for every new IKEv2 SA a gateway receives,
regardless of the global threshold.
Strict Cookie
Validation
affects only the IKE gateway being configured and
is disabled by default. With
Strict Cookie Validation
disabled, the system uses the
Cookie Activation
Threshold
to determine whether a cookie is needed or not.