In this field...
Do this...
Tr
ack
Specify whether to log null payload pin
following:
•
•
TCP
This catego
ry allows you to configure various protections related to t
protocol. It
includes the following:
• Strict TCP
on page 239
• Small PMTU on page 241
Strict TCP
Out-of-state TCP packets are SYN-ACK or data packets that arrive out of order,
before the TCP SYN packet.
Note: In normal conditions, out-of-state TCP packets can occur after the firewall
restarts, since connections which were established prior to the reboot are unknown.
This is normal and does not indica
Chapter 9: Setting Your Security Policy
Log. Log the packets. This is the default.
None. Do not log the packets.
g packets, by selecting one of the
te an attack.
Using SmartDefense
he TCP
239