12.5.7. Settings for device parameters

You change device parameters at the settings device level. To change a device parameter, use the following command (the <setting-name> is the parameter name):

Admin@UGOS# set settings device <setting-name>

Available parameters:

Parameter

Description

module_l7_enabled

Enable/disable L7 module load:

  • on.

  • off.

By default, the module is loaded.

Important! If you change this parameter, you need to reboot your UserGate device.

module_sip_enabled

Enable/disable SIP module load:

  • on.

  • off.

By default, the module is unloaded.

module_h323_enabled

Enable/disable h323 module load:

  • on.

  • off.

By default, the module is unloaded.

module_idps_enabled

Enable/disable IDPS module load:

  • on.

  • off.

By default, the module is loaded.

Important! If you change this parameter, you need to reboot your UserGate device.

module_sunrpc_enabled

Enable/disable SunRPC module load:

  • on.

  • off.

By default, the module is unloaded.

module_ftp_alg_enabled

Enable/disable FTP module load:

  • on.

  • off.

By default, the module is unloaded.

ha_auth_type

Use the IPsec Authentication Header signature for VRRP service packets in an HA cluster:

  • ah: enable the signature.

  • pass: disable checking.

fw_drop_invalid

Enable/disable blocking of packets with an invalid parameter set in the header fields:

  • on.

  • off.

The default setting is off. Enabling this option significantly reduces the firewall performance, so we recommend to leave this setting disabled.

fw_established

Enable/disable creation of a single common firewall rule for return packets:

  • on.

  • off.

The default setting is off.

decrypt_bypass_optimization

Enable/disable SSL inspection optimization:

  • on.

  • off.

The default setting is off.

To view the current settings, use the following command:

Admin@UGOS# show settings device

or

Admin@UGOS# show settings device <setting-name>