Does Juniper firewalls drop packets w/ TCP options?

[Cooky]

Cisco ASA's drop packets w/ TCP options by default.
Does Juniper ISG & SSG's do the same?

thx

 

[Gryz]

TCP options or IP header-options ?

IP header options are hardly used. (Source-routing is done via a IP option. And most people don't want source-routed packets coming in from the Internet). TCP options are a normal thing. They allow all kinds of optimizations. I don't think anyone wants to block those.

So I assume you mean IP header-options.
I don't know the answer to your question, sorry.

 

[Lithium381]

Are you talking about sessions based on TCP flows?
Syn syn/ack ack handshakes, which are specific to TCP?

what exactly are you asking when you mean "tcp options"