Check Point UTM-1 Edge - Page 420

SmartDefense Categories
406 Check Point UTM-1 Edge User Guide
Sequence Verifier
The UTM-1 appliance examines each TCP packet's sequence number and checks whether
it matches a TCP connection state. You can configure how the appliance handles packets
that match a TCP connection in terms of the TCP session but have incorrect sequence
numbers.
Table 84: Strict TCP
In this field… Do this…
Action Specify what action to take when TCP packets with incorrect sequence
numbers arrive, by selecting one of the following:
• Block. Block the packets.
• None. No action. This is the default.
Track Specify whether to log TCP packets with incorrect sequence numbers, by
selecting one of the following:
• Log. Log the packets. This is the default.
• None. Do not log the packets.