Advanced Settings
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 143
Stateful
Inspection
Attribute
Description
Drop out of
state ICMP
packets
Drop ICMP packets which are not in the context of a "virtual session".
ICMP virtual
session
timeout
An ICMP virtual session is considered to have timed out after this time period
(in seconds).
Log dropped
out of state
ICMP packets
Indicates if dropped out of state ICMP packets generate a log. See the "Drop
out of state ICMP packets" parameter.
Log dropped
out of state
TCP packets
Indicates if dropped out of state TCP packets generate a log. See the
"Accept out of state TCP packets" parameter.
Other IP
protocols
virtual
session
timeout
A virtual session of services which are not TCP, UDP or ICMP is considered
to have timed out after this time period (in seconds).
TCP end
timeout
Indicates the timeout (in seconds) for TCP session end. A TCP session is
considered as "ended" following two FIN packets, one in each direction, or
an RST packet.
TCP session
timeout
Indicates the timeout (in seconds) for TCP sessions. A TCP session times
out if the connection remains idle after this time period (in seconds).
TCP start
timeout
Indicates the timeout (in seconds) for TCP session start. A TCP connection
times out if the interval between the arrival of the first packet and
establishment of the connection (TCP three-way handshake) exceeds this
time period (in seconds).
UDP virtual
session
timeout
A UDP virtual session is timed out after this time period (in seconds).
Table: Stateful Inspection Attributes (continued)