Networking Features
- Tunnel Content Inspection
- Multiprotocol BGP
- Zone Protection for Multi-path TCP (MPTCP) Evasions
- Zone Protection for Non-IP Protocols on a Layer 2 VLAN or Virtual Wire
- Zone Protection for SYN Data Payloads
- Static Route Removal Based on Path Monitoring
- IPv6 Router Advertisement for DNS Configuration
- NDP Monitoring for Fast Device Location
- Hardware IP Address Blocking
- Packet Buffer Protection
- Reconnaissance Protection Whitelist
- IKE Peer and IPSec Tunnel Capacity Increases
Related Documentation
Networking Features
Networking Features New Networking Features Description Tunnel Content Inspection The firewall can now inspect the traffic content of cleartext tunnel protocols: Generic Routing Encapsulation (GRE) ...
Zone Defense
Zone Defense Zone protection defends zones from flooding, reconnaissance, packet-based, and protocol-based attacks with zone protection profiles, and from targeted flooding and resource attacks with ...
Reconnaissance Protection Whitelist
Reconnaissance Protection Whitelist While ports scanning can be used for legitimate network monitoring purposes, it can also be used by attackers to search for an ...
Configure Zone Protection to Increase Network Security
Configure Zone Protection to Increase Network Security The following topics provide zone protection configuration examples: Configure Reconnaissance Protection Configure Packet Based Attack Protection Configure Protocol ...
Configure Tunnel Content Inspection
Configure Tunnel Content Inspection Perform this task to configure tunnel content inspection for a tunnel protocol that you allow in a tunnel. Create a Security ...
GlobalProtect Reference Architecture Features
GlobalProtect Reference Architecture Features End User Experience Management and Logging Monitoring and High Availability ...
Packet Buffer Protection
Packet Buffer Protection To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause ...