R3721-F3210-F3171-HP High-End Firewalls Access Control Configuration Guide-6PW101

102
Figure 101 Configuring virtual fragment reassembly
After the configuration, if the Firewall receives disordered fragments from the security zone Trust, the
Firewall checks and reassembles them.
Configuration guidelines
When you configure virtual fragment reassembly, follow these guidelines:
• The virtual fragment reassembly feature only applies to packets incoming to a security zone.
• The virtual fragment reassembly feature does not support load sharing. That is, the fragments of an
IP datagram cannot arrive through different security zones.