User Manual Part 2

SmartDefense Categories
Chapter 14: Using SmartDefense 429
In this field… Do this…
Max Ping Size Specify the maximum data size for ICMP echo response.
The default value is 548.
IP Fragments
When an IP packet is too big to be transported by a network link, it is split into several
smaller IP packets and transmitted in fragments. To conceal a known attack or exploit, an
attacker might imitate this common behavior and break the data section of a single packet
into several fragmented packets. Without reassembling the fragments, it is not always
possible to detect such an attack. Therefore, the Safe@Office appliance always
reassembles all the fragments of a given IP packet, before inspecting it to make sure there
are no attacks or exploits in the packet.
You can configure how fragmented packets should be handled.