topic Re: dropped by fw_tcp_state_verification Reason: SYN on established conn response in Firewall and Security Management

dropped by fw_tcp_state_verification Reason: SYN on established conn response

Yatiraj_Panchal — Thu, 30 Apr 2020 13:46:53 GMT

Hi All,

We are getting below error intermittently.

dropped by fw_tcp_state_verification Reason: SYN on established conn response;

Gaia OS: R80.10 on gateway and management server both.

Please give me the reasons behind this issue and please check screenshot for the reference.

Thank You,

Re: dropped by fw_tcp_state_verification Reason: SYN on established conn response

Tal_Paz-Fridman — Thu, 30 Apr 2020 15:35:24 GMT

From similar cases I found it seems that he the message "Dropped by fw_tcp_state_verification Reason: SYN on established conn response" is because the Security Gateway received SYN packet on the connection that already existed, so when it was resent the SYN packet was dropped.