"sysopt security fragguard " in PIX 6.3(3)

[mnlatif]

Hi,

The above mentioned command no longer exists in 6.3(3). Is there an equivalent command ?

What was the reason for taking this out ?

Regards \\ Naman

[jmia]

Hi Naman,

From what I've read the reason it was taken out is because the above command (sysopt security fragguard) has been improved i.e.

"The sysopt security fragguard and fragguard commands have been replaced by the fragment command.

The fragment command provides additional management of packet fragmentation and improves compatibility with NFS".

Check also:-

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a8.html#56681

Thanks - Jay.

[scoclayton]

Naman,

Fragguard was superseeded by virtual reassembly back in 5.1. Since then, the 'sysopt security fragguard' command has not done anything. We removed this command in 6.3 - CSCdz35208 - Deprecate the sysopt security fragguard and fragguard command.

Scott