Cisco Cisco Firepower Management Center 4000

the IPv6 Hop Limit field when 

 is enabled

The system normalizes the packet by changing its TTL or Hop Limit value to the value set for this 
option when the packet value is less than 

. Setting this option to a value of 0, or any value 

less than 

, disables the option. The system assumes a value of 0 when the field is empty.

Enables normalization of IPv4 traffic. See 

 for information on 

specific IPv4 normalizations. The system also normalizes the TTL field as needed when this option 
is enabled and the value set for 

 enables TTL normalization. You can also enable 

 and 

 when this option is enabled.

Clears the single-bit Don’t Fragment subfield of the IPv4 Flags header field. Enabling this option 
allows a downstream router to fragment packets if necessary instead of dropping them; enabling this 
option can also prevent evasions based on crafting packets to be dropped. You must enable 

 to select this option.

Clears the single-bit Reserved subfield of the IPv4 Flags header field. You would typically enable 
this option. You must enable 

 to select this option.

Clears the one-byte Differentiated Services field, formerly known as Type of Service. You must 
enable 

 to select this option.

Truncates packets with excess payload to the datagram length specified in the IP header plus the 
Layer 2 (for example, Ethernet) header, but does not truncate below the minimum frame length. You 
must enable 

 to select this option.

Sets all Option Type fields in the Hop-by-Hop Options and Destination Options extension headers 
to 00 (Skip and continue processing). The system also normalizes the Hop Limit field as needed 
when this option is enabled and the value set for 

 enables hop limit normalization.

Clears the 8-bit Code field in Echo (Request) and Echo Reply messages in ICMPv4 traffic.

Clears the 8-bit Code field in Echo (Request) and Echo Reply messages in ICMPv6 traffic.

Enables normalization of TCP traffic. See 

 for information on 

specific TCP normalizations. When this option is enabled, you can also enable 

, 

, 

, and 

, and 

configure 

. You should ensure that the TCP stream preprocessor is enabled 

when you enable this option; see 

.