topic First packet isn't SYN R80.30 in General Topics

First packet isn't SYN R80.30

mohammedkhan — Tue, 01 Dec 2020 19:17:37 GMT

There are 2 firewalls.

According to the Src and Destination with ports. I have allowed the connections in both firewalls and after policy been installed User still facing packet drop issue. In which, I check firewalls logs and I saw the rules which I have created its hitting as an ACCEPT one time and rest of time its getting DROP

How can I solve this issue?

Re: First packet isn't SYN R80.30

Bob_Zimmerman — Tue, 01 Dec 2020 20:49:31 GMT

Do the drops come from a firewall where it already shows as accepted?

This particular drop suggests to me you have asymmetric routing. The path from the client to the server goes through the firewalls, while the path from the server back to the client does not. This would cause the firewalls to see the SYN and the ACK, but not the SYN-ACK between them, which would result in a drop like this.