D-Link NetDefend DFL-CP310 User Manual page 248

Using SmartDefense
In this field... Do this...
Max Ping Size Specify the maximum data size for ICMP echo response.
The default value is 1500.
IP Fragmen ts
When an IP packet is too big to be transported by a network link, it is split into
several smaller IP packets and transmitt
or exploit, an attacker might imitate this
section of a single packet into several fragmented packets. Without reassembling
the fragments, it is not always possible to detect such an attack. Therefore, the
NetDefend firewall always reassembles all the fragments of a given IP packet,
before inspecting it to mak
You can configure how fragmented packets should b
232
ed in fragments. To conceal a known attack
common behavior and break the data
e sure there are no attacks or exploits in the packet.
e handled.
D-Link NetDefend firewall User Guide