Support Center
>
Search Results
>
SecureKnowledge Details
The information you are about to copy is INTERNAL! DO NOT share it with anyone outside Check Point.
Define your search:
Search entire support site
Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets
Technical Level
Email
Print
Solution ID
sk108589
Technical Level
Product
SecureXL, Quantum Security Gateways
Version
R77.30 (EOL)
OS
Gaia
Platform / Model
21000
Date Created
07-Nov-2015
Last Modified
23-May-2017
Symptoms
Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets
Connections that should be accelerated by SAM card are forwarded to FireWall:
Output of "
fwaccel conns
" command shows that relevant connection are not marked with "F" flag (stands for F2F).
Output of "
ipsctl -a net:dev:adp:if:reasons
" command shows that value of counter "
net:dev:adp:if:reasons:disabled
" keeps increasing.
Cause
(Issue 01848202) SAM card goes into kernel panic in prescan path while handling fragmented packets.
(Issue 01928277) SAM card incorrectly forwards connections to 21000 appliance if prescan feature is disabled.
Solution
Note: To view this solution you need to
Sign In
.
Thanks for your feedback!
Are you sure you want to rate this
stars?