Release Notes

1301 | show firewall Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Enforce TCP Sequence numbers Disabled
AMSDU Rx Enabled
Jumbo Frames Disabled
Session-tunnel FIB Enabled
Prevent DHCP exhaustion Disabled
Stateful SIPS Processing Enabled
Deny source routing Disabled
Immediate Freeback Disabled
DPI Classification Enabled [Cfg: enabled, PEF license: installed]
STUN Based Traversal Enabled
Web Content Classification Enabled
Web Content Cache Miss Drop Disabled
The output of this command includes the following information:
Parameter Description
Enforce TCP handshake before allowing data
If enabled, this feature prevents data from passing
between two clients until the three-way TCP
handshake has been performed. This option
should be disabled when you have mobile clients
on the network as enabling this option will cause
mobility to fail. You can enable this option if there
are no mobile clients on the network.
Prohibit RST replay attack
If enabled, this setting closes a TCP connection in
both directions if a TCP RST is received from either
direction.
Deny all IP Fragments
If enabled, all IP fragments are dropped.
Prohibit IP Spoofing
When this option is enabled, source and
destination IP and MAC addresses are checked;
possible IP spoofing attacks are logged and an
SNMP trap is sent.
Monitor ping attack
If enabled, the controller monitors the number of
ICMP pings per second. If this value exceeds the
maximum configured rate, the controller will
register a denial of service attack.
Monitor TCP SYN attack
If enabled, the controller monitors the number of
TCP SYN messages per second. If this value
exceeds the maximum configured rate, the
controller will register a denial of service attack.
Monitor IP sessions attack
If enabled, the controller monitors the number of
TCP sessions requests per second. If this value
exceeds the maximum configured rate, the
controller will register a denial of service attack
sessions.
Deny inter user bridging
If enabled this setting prevents the forwarding of
Layer-2 traffic between wired or wireless users.
You can configure user role policies that prevent
Layer-3 traffic between users or networks but this
does not block Layer-2 traffic.
Log all received ICMP errors
Shows if the controller will log received ICMP
errors.