User Manual Part 2

Table Of Contents
SmartDefense Categories
426 Check Point Safe@Office User Guide
IP and ICMP
This category allows you to enable various IP and ICMP protocol tests, and to configure
various protections against IP and ICMP-related attacks. It includes the following:
Checksum Verification on page 436
Cisco IOS DO
S on page 433
IP Fragments on page 429
Max Ping Size on page 428
Network Quota on page 431
Null Payload on page 435
Packet Sanit
y on page 426
Welchia on pa
ge 432
Packet Sanity
Packet Sanity performs several Layer 3 and Layer 4 sanity checks. These include verifying
packet size, UDP and TCP header lengths, dropping IP options, and verifying the TCP
flags.
You can configure whether logs should be issued for offending packets.