I am using a Pix 525 (version 7.04). I have several questions about the TCP SYNC.
1) What is the default behaviour for TCP-SYNC-CHECK on Pix?
2) Does Pix have the option to disable TCP-SYNC-CHECK?
3) Does Pix send TCP_RST/FIN to both server and host in the trust & untrust interfaces when the service timeout? Or Pix only send TCP_RST/FIN to server or host residing on the higher security interface?
4) Can the sending of TCP_RST/FIN be disabled on Pix?