I was wondering if someone tried to implement this fix provided in 6.0.4 to relax the normilizer engine for asymmetric mode processing.
Does this fix impact the functionality of active signatures ??
Allow inline Asymmetric traffic (CSCsi72263)
The AnalysisEngine was modified to allow asymmetric traffic to be tracked and analyzed
by allowing for a relaxed Normalization process versus using the standard Normalizer.
This results in the ability to install the sensor inline in situations where the Normalizer would block or delay traffic due to the strict nature of stream processing and ânormalizationâ by not doing any protocol checking or packet reordering.