User guide

SmartDefense Categories
228 Check Point ZoneAlarm User Guide
Sequence Verifier
The ZoneAlarm router examines each TCP packet's sequence number and checks whether
it matches a TCP connection state. You can configure how the router handles packets that
match a TCP connection in terms of the TCP session but have incorrect sequence numbers.
Table 54: Strict TCP
In this field… Do this…
Action Specify what action to take when TCP packets with incorrect sequence
numbers arrive, by selecting one of the following:
• Block. Block the packets.
• None. No action. This is the default.
Track Specify whether to log TCP packets with incorrect sequence numbers, by
selecting one of the following:
• Log. Log the packets. This is the default.
• None. Do not log the packets.