cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Traffic is '...dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;'

Symptoms
  • Kernel debug (fw ctl debug -m fw + drop) shows: 

    fw_log_drop: Packet proto= ... dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;
  • Users trying to browse the web get timeout error messages in their web browser.

Setup is running R80.10 in a HA cluster (per state VS) and one Virtual System.

What does "PSL" means?

What does "UP_LIMIT" means?

0 Kudos
2 Replies
Admin
Admin

Re: Traffic is '...dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;'

PSL means "Passive Streaming Layer" which is a software component used by IPS, App Control, and others.

I would recommend engaging with the TAC: Contact Support | Check Point Software 

0 Kudos

Re: Traffic is '...dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;'

Hello Louis,

I've seen the UP_LIMIT drop when there is a Limit defined on Application Control Policy. For example, you defined 500 Kbps for YouTube and that limit has been surpased, so the traffic is being dropped.

Regards.

0 Kudos