The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Drops during policy installation in Fast Accelerator (fw fast_accel) with "Keep all connections" configuration
Technical Level
Solution ID
sk166212
Technical Level
Product
SecureXL
Version
R80.20, R80.30, R80.40
Date Created
01-May-2020
Last Modified
01-Oct-2020
Symptoms
Drops during policy installation in Passive Streaming Layer (PSL), when there is an active connection in fast_accel before the installation.
Connection persistence configured to: "Keep all connections".
Cause
A limitation regarding the connection re-offload. At policy installation with connection persistence configured to "Keep all connections", the connection packets from the server are dropped as there is no appropriate rule for it in fast_accel.