1. Do PIX's have syn flood protection enabled by default?
2. Do PIX's block packets from the WAN coming in with a source IP that is in a private class?
3. What does fixup protocol mean? Does it mean the PIX has the capability to examine this traffic specified at a high level (ie: fixup protocol http)