Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk108589
Technical Level
Product	SecureXL, Quantum Security Gateways
Version	R77.30
OS	Gaia
Platform / Model	21000
Date Created	07-Nov-2015
Last Modified	23-May-2017

Symptoms

Check Point 21000 series appliance with SAM card might crash while handling fragmented TCP packets
Connections that should be accelerated by SAM card are forwarded to FireWall:
1. Output of "fwaccel conns" command shows that relevant connection are not marked with "F" flag (stands for F2F).
2. Output of "ipsctl -a net:dev:adp:if:reasons" command shows that value of counter "net:dev:adp:if:reasons:disabled" keeps increasing.

Cause

(Issue 01848202) SAM card goes into kernel panic in prescan path while handling fragmented packets.
(Issue 01928277) SAM card incorrectly forwards connections to 21000 appliance if prescan feature is disabled.

Solution

Note: To view this solution you need to Sign In .