diff --git a/ansible/roles/firewall/templates/main.conf.j2.j2 b/ansible/roles/firewall/templates/main.conf.j2.j2
index d1fe30cf..cb666f06 100644
--- a/ansible/roles/firewall/templates/main.conf.j2.j2
+++ b/ansible/roles/firewall/templates/main.conf.j2.j2
@@ -92,6 +92,10 @@ DEVICE_SEQ_IN_DATA_CENTER={{ session_id_generator.snowflake_worker_id_offset }}
 FEATURE_TAMPER=1
 
 [TSG_CONN_SKETCH]
+tcp_min_pkts=3
+tcp_min_bytes=5
+udp_min_pkts=3
+udp_min_bytes=5
 log_service=2
 interim_service=6
 transaction_service=7