VPN tunnel breaks when IKE (UDP 500) or RDP (UDP 259) connection is 'dropped by fwpslglue_chain Reason: PSL Drop: ASPII

Support Center > Search Results > SecureKnowledge Details

VPN tunnel breaks when IKE (UDP 500) or RDP (UDP 259) connection is 'dropped by fwpslglue_chain Reason: PSL Drop: ASPII_MT'

Technical Level

Solution ID	sk90322
Technical Level
Product	Application Control, IPS, IPSec VPN
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL), R80.10 (EOL), R80.20, R80.30, R80.40
OS	Gaia
Platform / Model	All
Date Created	20-Dec-2012
Last Modified	28-Oct-2020

Symptoms

VPN tunnel breaks randomly.
Kernel debug taken during the issue (fw ctl debug -m fw + drop) shows the following drop of IKE connection:
fw_log_drop: Packet proto=17 X.X.X.X:500 -> Y.Y.Y.Y:500 dropped by fwpslglue_chain Reason: PSL Drop: ASPII_MT;
Kernel debug taken during the issue (fw ctl debug -m fw + drop) shows the following drop of RDP connection:
fw_log_drop: Packet proto=17 X.X.X.X:259 -> Y.Y.Y.Y:259 dropped by fwpslglue_chain Reason: PSL Drop: ASPII_MT;
IPSec VPN Link Selection in VPN Gateway object is set to 'Use probing. Link redundancy mode'.

Cause

The IKE (UDP port 500) connection or RDP (UDP port 259) connection is dropped by the Application Control Blade.

Solution

Note: To view this solution you need to Sign In .