This object sets the action to be taken when a security violation is detected. protect(1) - Drops all the packets from the insecure hosts at the port-security process level but does not increment the security-violation count. restrict(2) - Drops all packets from the insecure hosts at the port-security process level and increments the security-violation count. shutdown(3) - Shuts down the port if there is a security violation.