topic How PA deals with packets with bad checksum? in General Topics

How PA deals with packets with bad checksum?

Fatema — Mon, 17 Jul 2017 18:34:29 GMT

Hey Guys,

Just trying to find out if someone knows, what PA policy is regarding packects with bad checksum?

Will they be allowed through the PA, or PA silently drops those packets or sends back a reset to

the source?

Any help appreciated.

Thanks,

Fatema.

jvalentine — Mon, 17 Jul 2017 18:52:59 GMT

SSH/Console into your firewall and run the command "show session info". This documentation page has example output:

Look for the "Strict TCP/IP checksum" line. True = dropping packets w/ bad checksum.

I don't think this behavior can be modified from the GUI (although I could be wrong). From the CLI, the command is:

set session strict-checksum (yes/no)

Fatema — Mon, 17 Jul 2017 19:11:17 GMT

Great. Thanks for the Info. 🙂