SCREEN options are deployed at the ingress and egress sides of a packet flow.
Although SCREEN options are very useful, their use can result in more session creation.
SCREEN options offer protection against various attacks at the ingress zone of a packet flow.
SCREEN options examine traffic prior to policy processing, thereby resulting in fewer resouces used formalicious packet processing.