Quantcast
Channel: ScreenOS Firewalls (NOT SRX) topics
Viewing all articles
Browse latest Browse all 763

SSG140 v6.3.0r14.0 packet drop due to application error

$
0
0

Dear gurus,

 

I got a problem here:

 

## 2017-04-07 07:56:16 : ***** SCTP_INIT_ACK *****
## 2017-04-07 07:56:16 : existing assoc for INIT_ACK
## 2017-04-07 07:56:16 : Different tag Init-Ack!
## 2017-04-07 07:56:16 : SCTP state violation
packet dropped, application error

 

As shown above, SSG140 ALG decided something wrong with SCTP INIT_ACK.

 

I followed https://kb.juniper.net/InfoCenter/index?page=content&id=KB4872  and set application "IGNORE" in my policy, however SSG140 still report same error, ALG is still checking application layer.

 

It seems "IGNORE" is not effective. Anyone has idea?

 

Thanks!


Viewing all articles
Browse latest Browse all 763

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>