Setting the TCP MSS value per security policy

Two new options enable you to set the maximum segment size for TCP sessions per policy. The two options for the set security policies from-zone zone to-zone zone policy policy-name then permit tcp-options statement are initial-tcp-mss tcp-mss-value and reverse-tcp-mss tcp-mss-value. Previously, a packet's maximum segment size could only be set globally, for all TCP sessions, using the set security flow tcp-mss statement.