Traffic is dropped with "<code>dropped by fwmultik_process_f2p_cookie_inner Reason: fwmultik_f2p_cookie_outbound_and

Support Center > Search Results > SecureKnowledge Details

Traffic is dropped with "dropped by fwmultik_process_f2p_cookie_inner Reason: fwmultik_f2p_cookie_outbound_and_routing failed;" error message Technical Level

Solution ID	sk167953
Technical Level
Product	SecureXL
Version	R80.20, R80.20SP, R80.30, R80.30SP, R80.40
OS	Gaia
Platform / Model	AWS
Date Created	13-Jul-2020
Last Modified	18-Jul-2021

Symptoms

When secureXL is enabled on the Security Gateway, traffic is dropped with this error in kernel debug (fw ctl zdebug drop):
"dropped by fwmultik_process_f2p_cookie_inner Reason: fwmultik_f2p_cookie_outbound_and_routing failed;".
A device between the source and destination has an MTU higher that 1500. The Security Gateway has an MTU of 1500.

Cause

The PMTUD tries to find the optimal MTU in all the path between the client and the server by sending large MTU with DF flag, every node in the path that can accept only smaller MTU sends ICMP fragmentation needed with its acceptable MTU. The ICMP message is not sent properly.

Solution

Note: To view this solution you need to Sign In .