Thanks. Thats good news!
unfortunately i cant update some switches because the ram is not enough, even tho the software is listed as "recommended update" for that concrete switch.. But since every TCP traffic (expect from trusted sources) is dropped, there should be not need to add specific...