What does the IP Options Strip represent under the fw chain output?
A.
IP Options Strip is not a valid fw chain output.
B.
IP Options Strip is only used when VPN is involved.
C.
The IP Options Strip removes the IP header of the packet prior to be passed to the other
kernel functions.
D.
The IP Options Strip copies the header details to forward the details for further IPS
inspections.
It is C
Global Properties -> SmartDashboard customization -> Advanced Configuration -> Configure -> Firewall 1 -> Stateful inspection -> enable_ip_options (check/uncheck) but unchecking it removes from firewall VM chain module that inspects these Options at all and all Ip Options packets are dropped . So all packets bearing Ip Options are happily dropped even before security rules