UserGate allows you to set up protection parameters for each network zone against network flooding (for TCP (SYN-flood), UDP, ICMP), including the notification threshold (the minimal number of requests per IP address for logging) and the packet drop threshold (the minimal number of requests for packet dropping and subsequent logging).
It is also possible to set up exclusions, e.g. for networks zones that use VoIP and thus need to send many UDP packets.