SCTP multichunk inspection

The SCTP firewall checks all chunks in a message and then permits or drops the packet based on the policy. You can enable the SCTP multichunk inspection and disable the SCTP chunk inspection to check only the first chunk. If a data chunk is not allowed to pass through the SCTP profile because of protocol blocking or rate limiting, the SCTP firewall resets this chunk to a null PDU and continues to check the next chunk. If all chunks in a packet are null PDUs, the SCTP firewall drops the packet.