Symantec 10521146 Administration Guide - Page 168
Traffic Mode, Checksum validation parameters, Enable IPv4 Header Checksum Validation
UPC - 037648268134
View all Symantec 10521146 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 168 highlights
168 Detecting Configuring sensor detection Traffic Mode Traffic Mode regulates asymmetric routing in the following modes: Simplex: Duplex: The sensor predominantly monitors the client-to-server side of the connection. The sensor monitors both the client-to-server and the server-to-client sides of the connection. The default is set to duplex, and Symantec Network Security generally performs best in this mode. Change to simplex only under specific conditions or for specific environments. Set this parameter during deployment, when you decide which mode to use. Note: Restart the sensor for changes to this parameter to take effect. Caution: Switching this parameter to simplex has a broad effect on a number of Symantec Network Security features. Do not change this without a thorough understanding of the effects. Note: If a sensor in duplex mode receives a lot of simplex traffic, it displays an operational log message indicating that the flow records have been recycled, and that a large number of them have detected packets in only one direction. Checksum validation parameters The following parameters enable or disable the ability to validate checksums for a variety of traffic types. Enable IPv4 Header Checksum Validation Enable IPv4 Header Checksum Validation serves as the on/off switch enabling the sensor to validate IPv4 header checksums. An IPv4 header unit generates a checksum, and transmits it with the unit. The sensor generates a second checksum and compares them. Matching checksums confirm that the sensor received the complete transmission. By default, this parameter is enabled. If you installed a Network Security software node on a computer with no checksum capability, you may choose to disable this parameter and enhance performance. 7100 Series appliances have checksum capability.