A reset is sent only
after a session is formed. If the session is blocked before a 3-way
handshake is completed, the firewall will not send the reset.
For
a TCP session with a reset action, the firewall does not send an
ICMP Unreachable response. For a UDP session with a drop or
reset action, if the ICMP Unreachable check
box is selected, the firewall sends an ICMP message to the client. |