The SYN BOMB event indicates a possible denial of service attack against a target. In order to configure this event, go to Configuration -> Security Zones -> [select either Global or zone] -> Advanced. Then, on the lower section of the screen (Modules), select the Transport Layer module. The on line help has a great description of the SYN BOMB detection. You can adjust the threshold of outstanding SYN packets per server on this screen. Also, if you would like to prevent events of this (or any type) from being generated, either in general or on a particular IP or range, you can use the Event Tuning wizard. The Event Tuning wizard can be launched from the event detail window.
