Support Center > Search Results > SecureKnowledge Details
Security Gateway might crash while inspecting multicast traffic ; SecureXL does not accelerate multicast traffic
Symptoms
  • Security Gateway / VSX Gateway / Cluster member might crash while inspecting multicast traffic.

  • Output of 'fwaccel conns' command shows the connection from multicast sender to group id. However, "Flags" column does not show any flags. Multicast packets are passed directly to the FireWall.

    Example:
    [Expert@HostName:0]# fwaccel conns
    Source          SPort Destination     DPort PR Flags       C2S i/f S2C i/f Inst Identity
    --------------- ----- --------------- ----- -- ----------- ------- ------- ---- --------
          225.1.1.1  4444      40.40.40.3 50419 17 ........... 21/20   -/21     5        0 
         40.40.40.3 50419       225.1.1.1  4444 17 ........... 21/20   -/21     5 
    
Cause

Security Gateway crashes due to multicast packets that do not contain the Virtual System ID (VSID).

SecureXL does not accelerate multicast traffic due to incomplete internal verification for multicast support in SIM module.


Solution
Note: To view this solution you need to Sign In .