D-Link NetDefend DFL-CP310 User Manual page 246

Using SmartDefense
Table 39: Packet Sanity Fields
In this field... Do this...
Action Sp
one
•
•
Track Sp
sel
•
•
Disable relaxed Th
UDP length an
verification the
Howev
diff
check by default, performing the check but not dropping offending packets.
This is called relaxed UDP length verification.
Specify whether the NetDefend firewall should relax the UDP length
verification sanity check or not, by selecting one of the following:
•
•
230
ecify what action to take when a packet fails a sanity test, by selecting
of the following:
Block. Block the packet. This is th
None. No action.
ecify whether to issue logs for packets that fail the packet sanity tests, by
ecting one of the following:
Log. Issue logs. This is the de
None. Do not issue logs.
e UDP length verification sanity check measures the UDP header length
d compares it to the UDP heade
tw values differ, the packet may be corrupted. o
er, since different applications may measure UDP header len
erently, the NetDefend firewall relaxes the UDP length verific
True. Disable relaxed UDP length verification. The NetDefend
firewall will drop packets that fail the UDP length verification
check.
False. Do not disable relaxed UDP length verification. The
NetDefend firewall will not drop packets that fail the UDP length
verification check. This is the default.
e default.
fault.
r length specified in the UDP header. If
D-Link NetDefend firewall User Guide
gth
ation sanity