Chapter6 Firewall Policy
Edit Firewall Policy/ACL
6-12
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Alert Action
One of the following:
•default-on—Leave as default. Default value is on.
•on—Enable alert.
•off—Disable alert.
Audit Action
One of the following:
•default-off—Leave as default. Default value is off.
•on—Enable audit trail.
•off—Disable audit trail.
Timeout
Specify how long the router should wait before blocking return traffic for this
protocol or application. The field is prefilled with the default value.

Program Number

Enter a single program number in this field .

Wait Time

You can optionally specify how many minutes to allow subsequent RPC
connections from the same source to be made to the same destination address and
port. The default wait time is zero minutes.
Add Fragment application entry
In this window, you can add a fragment entry to an inspection rule that you are
configuring in the Edit Firewall Policy/ACL window, and you can specify Alert,
Audit, and Timeout settings. A fragment entry sets the maximum number of
unreassembled packets that the router should accept before droppi ng them.