D-Link NetDefend DFL-CP310 User Manual page 245

IP and ICMP
This category allows you to enable various IP and ICMP protocol tests, and to
configure various protections against IP
following:
• Packet Sanity on page 229
• Max Ping Size on
• IP Fragments
• Network Quota on pa
• Welchia on page 235
• Cisco IOS DOS on page 236
• Null Payload on page 238
Pa cket Sanity
Packet San ity performs several Layer 3 and Layer 4 sanity checks. These include
verifying packet size, UDP and TCP header lengths, dropping IP options, and
ve fying ri the TCP flags.
You can conf igure whether logs should be issued for offending packets.
Chapter 9: Setting Your Security Policy
page 231
on page 232
ge 234
and ICMP-related attacks. It includes the
Using SmartDefense
229