User guide

Configuring SmartDefense
202 Check Point ZoneAlarm User Guide
Table 37: SmartDefense Security Levels
This level… Does this…
Minimal Disables all SmartDefense protections, except those that cannot be disabled.
Normal Enables the following:
• Teardrop
• Ping of Death
• LAND
• Packet Sanity
• Max Ping Size (set to 1500)
• Welchia
• Cisco IOS
• Null Payload
• IGMP
• Small PMTU (Log Only)
This level blocks the most common attacks.
High
Enables the same protections as Normal level, as well as the following:
• Host Port Scan
• Sweep Scan
• HTTP Header Rejection
• Strict TCP (Log Only)
Extra Strict
Enables the same protections as High level, as well as the following:
• Strict TCP (Log + Block)
• Small PMTU (Log + Block)
• Max Ping Size (set to 512)
• Network Quota