You can enable
Strict Cookie Validation
if
you want cookie validation performed for every new IKEv2 SA a gateway receives,
regardless of the global threshold.
Strict Cookie Validation
affects
only the IKE gateway being configured and is disabled by default. With
Strict
Cookie Validation
disabled, the system uses the
Cookie
Activation Threshold
to determine whether a cookie is
needed or not.