SecuRemoteUDPEncapCompat Allow IP data to contain eight bytes more than the
UDP total length field specifies -- Checkpoint
SecuRemote violates NAT-T drafts. (Default: No)
IPOptionSizes Validity of IP header option sizes. (Default:
ValidateLogBad)
IPOPT_SR How to handle IP packets with contained source or
return routes. (Default: DropLog)
IPOPT_TS How to handle IP packets with contained
Timestamps. (Default: DropLog)
IPOPT_RTRALT How to handle IP packets with contained route
alert. (Default: ValidateLogBad)
IPOPT_OTHER How to handle IP options not specified above.
(Default: DropLog)
DirectedBroadcasts How to handle directed broadcasts being passed
from one interface to another. (Default: DropLog)
TransparentBroadcastNAT How to handle Broadcast packets matching a NAT
rule in Transparent mode. (Default: DropLog)
IPRF How to handle the IP Reserved Flag, if set; it should
never be. (Default: DropLog)
StripDFOnSmall Strip the "DontFragment" flag for packets of this
size or smaller. (Default: 65535)
MulticastIPEnetOnMismatch What action to take when ethernet and IP
multicast addresses do not match. (Default:
DropLog)
Note
This object type does not have an identifier and is identified by the name of the type
only. There can only be one instance of this type.
Chapter 3: Configuration Reference
226
To Next Page
Loading...
