If you have a multi virtual system environment, and have
enabled the following:
External zones to enable inter
virtual system communication
Shared gateways to allow virtual systems to share a common interface
and a single IP address for external communications
the
following Zone and DoS protection mechanisms will be disabled on
the external zone:
SYN cookies
IP fragmentation
ICMPv6
To enable IP fragmentation and ICMPv6 protection
for the shared gateway, you must create a separate Zone Protection
profile for the shared gateway.
To protect against SYN floods
on a shared gateway, you can apply a SYN Flood protection profile
with either Random Early Drop or SYN cookies; on an external zone,
only Random Early Drop is available for SYN Flood protection.
