Check Point UTM-1 Edge User Manual page 407

In this field... Do this...
Max Ping Size Specify the maximum data size for ICMP echo response.
The default value is 1500.
IP Fragments
When an IP packet is too big to be transported by a network link, it is split into several
smaller IP packets and transmitted in fragments. To conceal a known attack or exploit, an
attacker might imitate this common behavior and break the data section of a single packet
into several fragmented packets. Without reassembling the fragments, it is not always
possible to detect such an attack. Therefore, the UTM-1 appliance always reassembles all
the fragments of a given IP packet, before inspecting it to make sure there are no attacks or
exploits in the packet.
You can configure how fragmented packets should be handled.
Chapter 13: Using SmartDefense
SmartDefense Categories
393