Smartdefense Network-Security Tcp Strict-Tcp - D-Link NetDefend DFL-CP310 Cli Reference Manual

smartdefense network-security tcp strict-tcp

P
URPOSE
The

smartdefense network-security tcp strict-tcp

for working with Strict TCP settings in the following ways:
• Configuring Strict TCP settings
• Displaying and exporting Strict TCP settings
Out-of-state TCP packets are SYN-ACK or data packets that arrive out of order,
before the TCP SYN packet.
Note: In normal conditions, out-of-state TCP packets can occur after the NetDefend
restarts, since connections which were established prior to the reboot are unknown.
This is normal and does not indicate an attack.
You can configure how out-of-state TCP packets should be handled.
S
YNTAX
When used with
set
set smartdefense network-security tcp strict-tcp [enforce enforce] [log log]
When used with
show
show smartdefense network-security tcp strict-tcp [enforce | log]
F
IELDS
enforce
Chapter 5: CLI Variables
:
:
String. Indicates whether to enable blocking out-of-state TCP
packets. This can have the following values:
•
enabled
•
disabled
The default value is
smartdefense network-security tcp strict-tcp
- Blocking is enabled.
- Blocking is disabled.
disabled
.
variable is used
331