When using SAM, the target address is block but firewall send a reset
instead of dropping the packet. Is there a way to change SAM?
In case of IDS, you want to slow down a intruder's scan. A drop is much
better than a reject (or reset).
Ken
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
