Re: How stateful is stateful inspection?

["Sean Costello" <xlate () home com>]

> David Lang wrote:
>
> Having just gone through an evaluation of firewall-1 I would like to point
> out that they reccomend NOT to turn on the optional defragmentation
> capibility for performance/memory reasons.


I think you may be confusing the defragmentation engine with Syn 
Defender since there is nothing optional about the way FW1 handles 
these packets since at least 3.0b...if not 3.0a.

Sean