IPS protection "TCP Off-Path Sequence Inference" drops TCP packets originated by Security Gateway

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk104637
Technical Level
Product	IPS
Version	R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
Platform / Model	All
Date Created	09-Feb-2015
Last Modified	30-May-2015

Symptoms

SmartView Tracker logs show that IPS protection "TCP Off-Path Sequence Inference" drops TCP packets originated by Security Gateway:

Blade: IPS
Action: Drop
Attack Name: Streaming Engine: TCP off-path sequence inference
Attack Information: TCP off-path sequence inference.
Protection Name: TCP off-path sequence inference
Protection ID: tcp_off_path_enable

SecureXL status (enabled / disabled) is not relevant.

Cause

IPS protection "TCP Off-Path Sequence Inference" drops TCP packets originated by Security Gateway that contain "ACK" number that was already accepted.

Solution

Note: To view this solution you need to Sign In .