recently I have seen some Apple devices triggering the HostDos icmpSize check (set to the default size limit of 1024) on an S-Series:
Event(Notice) for [i] - HostDoS Attack ( icmpSize ) detected on vlan.0.
Has anyone else seen this? Is this some (new?) iDevice feature, or connected with using e.g. a VPN on the iDevice?