The DDoS filter is based on based external user traffic for websites, DNS servers, streaming services and so on. It is NOT based on management'usage. For management traffic SSH, SNMP, ICMP we advice that you will add a seperate ip from another subnet on you hardware, with your personal firewall close all traffic of that subnet to the internet exept you management and monitorring ip's anduse this ip for your management.