topic SGM drop traffic after returning to ACTIVE state in Hyperscale Firewall (Maestro)

SGM drop traffic after returning to ACTIVE state

H1pp0o — Wed, 05 Apr 2023 18:38:50 GMT

Dear CheckMates,

I would like to find out if the described Sk180705 could be related also to my issue. On the sk its mentioned that after a failure this behaviour my occur and on my enviroment it happend after SGM reboot and returning back to ACTIVE state.

The SGM was rebooted, returned to ACTIVE state and then all existing connection have been dropped.

VSX

R81.10 take 79

Re: SGM drop traffic after returning to ACTIVE state

Chris_Atkinson — Wed, 05 Apr 2023 23:04:31 GMT

It seems likely but to conclusively determine this you would need the debug output suggested in the SK to confirm it matches 100%

Re: SGM drop traffic after returning to ACTIVE state

amoruck — Thu, 06 Apr 2023 07:03:05 GMT

The explanation we see in this SK is that "connection was not removed from the SecureXL connection table when the User Space Firewall experienced a failure, such as when FWK process stops working"; But for me it seems that during a reboot the connection table is cleared anyway, so I do not quite understand how can we relate it to reboot.