https://community.checkpoint.com/t5/General-Topics/Replay-Attack/m-p/123228#M22797 <P>See if this sk help you out.</P><P><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk94984" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk94984</A></P><P>&nbsp;</P> Wed, 07 Jul 2021 16:36:34 GMT CPRQ 2021-07-07T16:36:34Z https://community.checkpoint.com/t5/General-Topics/Replay-Attack/m-p/123222#M22792 <P>Hi All,</P><P>I see the replay attack warning and the VPN dropped.</P><P><SPAN>Warning: possible replay attack. Sequence Number 1156 (Expected 1212)</SPAN></P><P><SPAN>I see the default replay window size is 64, if that is the case the above packet should have been allowed right? 1156+64 = 1220 and the expected packet is 1212 which is less than the window size. What could be the reason for the above issue?</SPAN></P><P>Any suggestions is highly appreciated.</P><P>Regards,</P><P>Sanjay S</P> Wed, 07 Jul 2021 15:47:25 GMT https://community.checkpoint.com/t5/General-Topics/Replay-Attack/m-p/123222#M22792 Sanjay_S 2021-07-07T15:47:25Z https://community.checkpoint.com/t5/General-Topics/Replay-Attack/m-p/123228#M22797 <P>See if this sk help you out.</P><P><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk94984" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk94984</A></P><P>&nbsp;</P> Wed, 07 Jul 2021 16:36:34 GMT https://community.checkpoint.com/t5/General-Topics/Replay-Attack/m-p/123228#M22797 CPRQ 2021-07-07T16:36:34Z