SNX traffic with R80.10 Security Gateway dropped with "Rulebase - ERROR"

Support Center > Search Results > SecureKnowledge Details

SNX traffic with R80.10 Security Gateway dropped with "Rulebase - ERROR"

Technical Level

Solution ID	sk123336
Technical Level
Product	SSL Network Extender, Mobile Access / SSL VPN
Version	R80.10 (EOL)
OS	Windows, macOS, Linux
Platform / Model	All
Date Created	06-Mar-2018
Last Modified	22-Nov-2021

Symptoms

SNX traffic with R80.10 Security Gateway dropped.
#fw ctl zdebug drop | grep output:
dropped by fw_send_log_drop Reason: Rulebase - ERROR;
VPN Kernel debug:
cmi_context_exec_from_non_stream: cmik_loader_fw_context_match_cb(context=352, app_id = 23, context_apps=ec0000) failed;
[ERROR]: up_manager_fw_handle_first_packet: cmi_exec_from_first_packet() failed;
[ERROR]: up_manager_fw_handle_first_packet: failed to execute first packet context; fw_log_drop_ex: Packet proto=xx x.x.x.x:xxxxx -> y.y.y.y:yy dropped by fw_send_log_drop Reason: Rulebase - ERROR;
CVPND.elg:
[AUTHORIZATION] [CVPN_INFO] Authorization::MailAuthorizeCommand::isSensitivitySatisfied: Sensitivity secondary authentication is not satisfied

Cause

Mobile Access Blade protection levels were configured incorrectly and caused the Mobile Access Blade policy to drop/reject the specific connection.

Solution

Note: To view this solution you need to Sign In .