Using SmartDefense
In this field… Do this…
Tr
g packets, by selecting one of the
ack
Specify whether to log null payload pin
following:
•
Log.
Log the packets. This is the default.
•
None.
Do not log the packets.
TCP
This catego
he TCP
protocol. It
•
Strict TCP
•
Small PMTU
on page 241
Strict TCP
Out-of-state TCP packets are SYN-ACK or data packets that arrive out of order,
before the TCP SYN packet.
ry allows you to configure various protections related to t
includes the following:
on page 239
Note:
In normal conditions, out-of-state TCP packets can occur after the firewall
restarts, since connections which were established prior to the reboot are unknown.
te an attack.
This is normal and does not indica
Chapter 9: Setting Your Security Policy
239