diff --git a/ansible/roles/traffic-engine/files/helm/conf/sapp.toml b/ansible/roles/traffic-engine/files/helm/conf/sapp.toml
index fe158141..bac96877 100644
--- a/ansible/roles/traffic-engine/files/helm/conf/sapp.toml
+++ b/ansible/roles/traffic-engine/files/helm/conf/sapp.toml
@@ -123,8 +123,13 @@ bypass_trigger_cpu_usage={{ .Values.overload_protection.detect_threshold_cpu_usa
 ### note, can't distinguish between duplicate traffic and application retransmit traffic for IPv6 packets,
 ###       so not support IPv6 original duplicate traffic check.
 
+
 [dup_pkt.traffic.inject]
+{{- if  eq .Values.session_manager.inject_duplicated_packet_filter  .Values.define_enable_val_yes }}
 	inject_all_enabled=1
+{{- else }}
+    inject_all_enabled=0
+{{- end }}
 
 [dup_pkt.parameters]
 	bloom_capacity=1000000
diff --git a/ansible/roles/traffic-engine/files/helm/values.yaml b/ansible/roles/traffic-engine/files/helm/values.yaml
index 8306dec0..7fe9f62e 100644
--- a/ansible/roles/traffic-engine/files/helm/values.yaml
+++ b/ansible/roles/traffic-engine/files/helm/values.yaml
@@ -73,6 +73,7 @@ session_manager:
   udp_session_max: 5021
   tcp_duplicated_packet_filter: yes
   udp_duplicated_packet_filter: yes
+  inject_duplicated_packet_filter: yes
 
 traffic_mirror:
   enable_raw_traffic: yes