topic fragmenteted packet through PIX in Network Security https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111816#M709059 <P>Hi,</P><P></P><P>my question is:</P><P></P><P>- How PIX works normally with fragmented packets? reley these, blocks, discards or reassebles?</P><P>- And what changes if I type: "sysopt security fragguard"?</P><P></P><P>THX,</P><P>Graz</P> Fri, 21 Feb 2020 06:11:17 GMT g.rodegari 2020-02-21T06:11:17Z fragmenteted packet through PIX https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111816#M709059 <P>Hi,</P><P></P><P>my question is:</P><P></P><P>- How PIX works normally with fragmented packets? reley these, blocks, discards or reassebles?</P><P>- And what changes if I type: "sysopt security fragguard"?</P><P></P><P>THX,</P><P>Graz</P> Fri, 21 Feb 2020 06:11:17 GMT https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111816#M709059 g.rodegari 2020-02-21T06:11:17Z Re: fragmenteted packet through PIX https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111817#M709092 <HTML><HEAD></HEAD><BODY><P>Following link explains your queries regarding default action for fragmented packets arriving on PIX.</P><P></P><P>In order to manage fragmented packets arriving on PIX which are legitimate, you need to configure the 'fragment' command on PIX.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/df.htm#xtocid15" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/df.htm#xtocid15</A></P><P></P><P>Using the 'sysopt security fragguard' protects the PIX against IP fragment style attacks recommended in RFC 1858 against the many others: eg teardrop, land, etc.</P><P></P><P>HTH</P><P>R/Yusuf</P></BODY></HTML> Thu, 01 Aug 2002 05:14:45 GMT https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111817#M709092 yusuff 2002-08-01T05:14:45Z Re: fragmenteted packet through PIX https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111818#M709140 <HTML><HEAD></HEAD><BODY><P>Thanks!</P><P></P><P>Graz.</P></BODY></HTML> Thu, 01 Aug 2002 05:47:19 GMT https://community.cisco.com/t5/network-security/fragmenteted-packet-through-pix/m-p/111818#M709140 g.rodegari 2002-08-01T05:47:19Z