Advanced Tab Field Descriptions - Symantec 360R - Security Gateway SGS Administration Manual

206 Field descriptions
IDS/IPS field descriptions

Advanced tab field descriptions

Configure spoof protection on the Advanced tab.
Table C-33 Advanced tab field descriptions
Section Field
IP Spoof Protection WAN
WLAN/LAN
TCP Flag Validation TCP Flag Validation
Description
Enables spoof protection on the LAN.
Enables spoof protection on the wireless
LAN and LAN.
Blocks and logs any traffic with illegal flag
combinations for traffic that is not being
denied by the security policy. Any traffic
denied by the security policy that has one
or more bad TCP flag combinations is
classified as one of several NMAP port
scanning techniques (NMAP Null Scan,
NMAP Christmas Scan, and so on).