topic TCP Packet out of state, First Packet is not syn in Firewall and Security Management

TCP Packet out of state, First Packet is not syn

Hardeep_Singh — Fri, 05 Jul 2019 23:49:47 GMT

Hi,

Can somebody explain me, i am getting this error in tracker. not getting proper reply from tech team.

TCP Packet out of stat First Packet is not syn

TCP Flag PUSH-ACK

Re: I am getting below issue

PhoneBoy — Fri, 05 Jul 2019 23:49:20 GMT

Generally, we expect to see the full three-way handshake of a TCP connection.
If, for some reason, we don't see the full handshake, then you might see this error.
Some of the reasons you might see this are explained in this SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk31382
Unless there are actual connectivity or application issues observed, these can safely be ignored.

Re: TCP Packet out of state, First Packet is not syn

Timothy_Hall — Sat, 06 Jul 2019 13:32:25 GMT

Please see my response in this thread:

https://community.checkpoint.com/t5/General-Topics/First-packet-isn-t-SYN/m-p/7021

Whether you should do anything about it depends upon what TCP flags you see reported in the dropped packet. In your case of ACK accompanied by PSH, that would generally indicate that the connection was idled out of the firewall's state table due to inactivity (60 minutes default idle timer).