Hi Ken,
You can use Followed Actions for your security policies to quarantine related source IP address for a specific time (3600 seconds) period. For example;

------------------------------
Cezmi Cal
technical support engineer
Barikat Internet Guvenligi Bilisim Ticaret A.S.
Ankara
------------------------------