Security Gateway drops ICMP traffic due to: "fw_conn_post_inspect Reason: First server side outbound packet is an ICMP"

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk147492
Technical Level
Product	IPSec VPN, Quantum Security Gateways
Version	R80.20 (EOL)
OS	Gaia
Date Created	19-Feb-2019
Last Modified	30-Jan-2020

Symptoms

Security Gateway drops ICMP traffic due to: "fw_conn_post_inspect Reason: First server side outbound packet is an ICMP"

Cause

When a connection is accelerated through the Security Gateway, the connection is not properly defined as a VPN connection.

This causes the ICMP request, sent from the source, to be dropped due to "fw_conn_post_inspect Reason: First server side outbound packet is an ICMP"

* Note: This symptom may occur even when VPN is not used. This SK applies for such scenarios as well.

Solution

Note: To view this solution you need to Sign In .