Support Center > Search Results > SecureKnowledge Details
Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets
Symptoms
  • Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets

  • Connections that should be accelerated by SAM card are forwarded to FireWall:

    1. Output of "fwaccel conns" command shows that relevant connection are not marked with "F" flag (stands for F2F).
    2. Output of "ipsctl -a net:dev:adp:if:reasons" command shows that value of counter "net:dev:adp:if:reasons:disabled" keeps increasing.
Cause
  • (Issue 01848202) SAM card goes into kernel panic in prescan path while handling fragmented packets.
  • (Issue 01928277) SAM card incorrectly forwards connections to 21000 appliance if prescan feature is disabled.

Solution
 Note: To view this solution you need to Sign In .