RE: Problem about reassembly and fragmentation

[Scott Fluhrer <sfluhrer@cisco.com>]

At 12:33 PM 3/8/2002, Joseph Tardo wrote:
>What if you are supporting port policies? Don't you need the transport
>header to verify policy on the decrypted fragments?

Well, yes, if your SPD specifies ports, then you will need to find out what 
the ports are before applying the policy.  However, that doesn't apply SPD 
doesn't specify ports (and sometimes they don't), and even if it does, 
there are ways short of total reassembly for gaining that information.

--
scott