Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

SSG140 v6.3.0r14.0 packet drop due to application error

$
0
0

Dear gurus,

 

I got a problem here:

 

## 2017-04-07 07:56:16 : ***** SCTP_INIT_ACK *****
## 2017-04-07 07:56:16 : existing assoc for INIT_ACK
## 2017-04-07 07:56:16 : Different tag Init-Ack!
## 2017-04-07 07:56:16 : SCTP state violation
packet dropped, application error

 

As shown above, SSG140 ALG decided something wrong with SCTP INIT_ACK.

 

I followed https://kb.juniper.net/InfoCenter/index?page=content&id=KB4872  and set application "IGNORE" in my policy, however SSG140 still report same error, ALG is still checking application layer.

 

It seems "IGNORE" is not effective. Anyone has idea?

 

Thanks!


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>