D-Link NetDefend DFL-CP310 User Manual page 255

In this field... Do this...
Tr ack Specify whether to log null payload pin
following:
•
•
TCP
This catego ry allows you to configure various protections related to t
protocol. It includes the following:
• Strict TCP
on page 239
• Small PMTU on page 241
Strict TCP
Out-of-state TCP packets are SYN-ACK or data packets that arrive out of order,
before the TCP SYN packet.
Note: In normal conditions, out-of-state TCP packets can occur after the firewall
restarts, since connections which were established prior to the reboot are unknown.
This is normal and does not indica
Chapter 9: Setting Your Security Policy
Log. Log the packets. This is the default.
None. Do not log the packets.
g packets, by selecting one of the
te an attack.
Using SmartDefense
he TCP
239