Dameon Welch-Abernathy

How to Disable Out of State TCP/ICMP without a Policy Install

Discussion created by Dameon Welch-Abernathy Moderator on Jul 25, 2017

Generally speaking, disabling "out of state" checks is not recommended.

However, it is sometimes useful in certain situations.

In the distant past, it required a policy installation to change this configuration, but it's possible to enable/disable these checks "on the fly," at least temporarily. 

Refer to the following SK: How to enable/disable Out of State inspection on a Security Gateway without performing a policy installation