i have a IPS 4260 monitoring 4 inline links, connecting to a MARS 20.
MARS having been reporting a large amount of TCP related alerts over WAN; ie:
-TCP packet with segment out of order,
-TCP packet out of state order,
-TCP segment out of window,
-TCP Packet With Bad Checksum
Can anyone advice on the best practise or how should i assess and handle these situation?