3.1.7.6 Enter DoS Protection Mode

When the number of SAs in a state other than Quick Mode Initiator Done or Quick Mode Responder Done states is at least 500, the host MUST enter DoS protection mode. This mode is used by the responder to handle denial of service protection attacks. While the host is in DoS protection mode, it MUST behave as specified in [MS-IKEE] section 3.9.