Run the display cpu-defend policypolicy-name command to check the attack defense policy.
Check the ACL of the blacklist in the displayed attack defense policy information, and run the display aclacl-number command to check whether service
packets match the ACL rule.
If service packets do not match the ACL rule, run the rule command in the ACL view to modify the ACL rule. If service packets match the ACL rule, the blacklist may fail to be applied because ACL resources are insufficient.