PIX 525 TCP Sync

Unanswered Question
Dec 5th, 2007
User Badges:


I am using a Pix 525 (version 7.04). I have several questions about the TCP SYNC.

1) What is the default behaviour for TCP-SYNC-CHECK on Pix?

2) Does Pix have the option to disable TCP-SYNC-CHECK?

3) Does Pix send TCP_RST/FIN to both server and host in the trust & untrust interfaces when the service timeout? Or Pix only send TCP_RST/FIN to server or host residing on the higher security interface?

4) Can the sending of TCP_RST/FIN be disabled on Pix?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion