Details
SonicWALL – Flood Protection – TCP – Maximum Segment Lifetime <= 8 seconds.
Determines the number of seconds that any TCP packet is valid before it expires. This setting is also used to determine the amount of time (calculated as twice the Maximum Segment Lifetime, or 2MSL) that an actively closed TCP connection remains in the TIME_WAIT state to ensure that the proper FIN / ACK exchange has occurred to cleanly close the TCP connection.
Solution
Navigate to Firewall Settings->Flood Protection->TCP Settings and set ‘Maximum Segment Lifetime (seconds):’ to a value of 8 or less.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system SonicWALL.