Motorola WiNG 5.5 - Page 582

8 - 12 WiNG 5.5 Access Point System Reference Guide
21. Refer to the TCP Protocol Checks field to set the following parameters:
22. Select OK to update the Firewall Policy Advanced Settings. Select Reset to revert to the last saved configuration. The
firewall policy can be invoked at any point in the configuration process by selecting Activate Firewall Policy from the
upper, left-hand side, of the access point user interface.
ICMP Define a flow timeout value in either Seconds (1 - 32,400), Minutes (1 - 540) or
Hours (1 - 9). The default setting is 30 seconds.
UDP Define a flow timeout value in either Seconds (15 - 32,400), Minutes (1 - 540) or
Hours (1 - 9). The default setting is 30 seconds.
Any Other Flow Define a flow timeout value in either Seconds (1 - 32,400), Minutes (1 - 540) or
Hours (1 - 9). The default setting is 30 seconds.
Check TCP states where
a SYN packet tears down
the flow
Select the check box to allow a SYN packet to delete an old flow in TCP_FIN_FIN_STATE
and TCP_CLOSED_STATE and create a new flow. The default setting is enabled.
Check unnecessary
resends of TCP packets
Select the check box to enable the checking of unnecessary resends of TCP packets. The
default setting is enabled.
Check Sequence
Number in ICMP
Unreachable error
packets
Select the check box to enable sequence number checks in ICMP unreachable error
packets when an established TCP flow is aborted. The default setting is enabled.
Check Acknowledgment
Number in RST packets
Select the check box to enable the checking of the acknowledgment number in RST
packets which aborts a TCP flow in the SYN state. The default setting is enabled.
Check Sequence
Number in RST packets
Select the check box to check the sequence number in RST packets which abort an
established TCP flow. The default setting is enabled.