Dameon Welch Abernathy

How to Disable Out of State TCP/ICMP without a Policy Install

Discussion created by Dameon Welch Abernathy Employee on Jul 25, 2017

Generally speaking, disabling "out of state" checks is not recommended.

However, it is sometimes useful in certain situations.

In the distant past, it required a policy installation to change this configuration, but it's possible to enable/disable these checks "on the fly," at least temporarily. 

Refer to the following SK: How to enable/disable Out of State inspection on a Security Gateway without performing a policy installation