SmartDefense Categories
394 Check Point UTM-1 Edge User Guide
Table 75: IP Fragments Fields
In this field… Do this…
Forbid IP Fragments Specify whether all fragmented packets should be dropped, by selecting
one of the following:
• True. Drop all fragmented packets.
• False. No action. This is the default.
Under normal circumstances, it is recommended to leave this field set to
False. Setting this field to True may disrupt Internet connectivity, because
it does not allow any fragmented packets.
Max Number of
Incomplete Packets
Type the maximum number of fragmented packets allowed. Packets
exceeding this threshold will be dropped.
The default value is 300.
Timeout for
Discarding
Incomplete Packets
When the UTM-1 appliance receives packet fragments, it waits for
additional fragments to arrive, so that it can reassemble the packet.
Type the number of seconds to wait before discarding incomplete
packets.
The default value is 10.
Track Specify whether to log fragmented packets, by selecting one of the
following:
• Log. Log all fragmented packets.
• None. Do not log the fragmented packets. This is the default.
To Next Page
Loading...
