Can ONTAP drop TCP packets with the SYN and FIN flag set?
Applies to
- ONTAP 9
- TCP SYN/FIN flag
Answer
- By default, ONTAP accepts packets that have both the SYN and FIN bits set in the TCP flag.
- TCP tunning has an option to drop packets with both the SYN and FIN bits set to reduce security vulnerability.
- The command is only available in the diagnostic mode. Please contact NetApp Technical Support and reference this article for further assistance
Additional Information
additionalInformation_text