Configuring TCP Session Reassembly

Nov 25,2008 by admin

Configuring TCP Session Reassembly

In order to configure TCP Session Reassembly, follow these steps:

In CSPM, select the Sensing configuration tab of the sensor you want to configure.

Select TCP Three-Way Handshake in the configuration screen. This tracks only three-way handshakes that are complete.

Choose what method you will use for reassembly.

Define values for TCP Open Establish Timeout and TCP Embryonic Timeout.

Once you have finished configuring the Sensing parameters, click OK, then save and update your configuration.

Finally, from the Command tab, click Approve Now to push the new configuration to your sensor.

Note

TCP Open Establish Timeout gives the number of seconds before the sensor frees the resources allocated for established TCP sessions. Ninety seconds is the default. TCP Embryonic Timeout gives the number of seconds before the sensor frees the resources allocated for half-open TCP sessions. Fifteen seconds is the default.

Related news

» Sensing Properties
by admin posted on Nov 25,2008
» IP Fragment Reassembly
by admin posted on Nov 25,2008
» Configuring IP Fragment Reassembly
by admin posted on Nov 25,2008
» Configuring the Sensing Parameters
by admin posted on Nov 25,2008
» TCP Session Reassembly
by admin posted on Nov 25,2008

Did you enjoy this article?

(total 0 votes)

Comments (0 posted)

More Top News

CCSP-Cisco Certified Security Professional