A security engineer needs to configure policies for a newly deployed Cisco FTD. The company security policy states that five or more connections initiated from external sources within 2 minutes are cause for concern. Which policy type must be configured in Cisco FMC to generate an alert when this condition is met?