TCP packet out of state: First packet isn't SYN tcp_flags: PUSH-ACK

[kulwinder_barhe]

Hello There,

I have a VPN tunnel from my Checkpoint Gateway to another external Checkpoint Gateway. Tunnel was up and running from years but suddenly starts giving intermittent issue sometimes and nothing goes through the tunnel for 5-10 mins and I see following error in the Tracker. all the traffic goes back to normal by itself after few minutes. I do see Key Negotiation when traffic starts flowing again. Thanks

TCP packet out of state: First packet isn't SYN tcp_flags: PUSH-ACK

[PhoneBoy]

It could be an outage on the remote end or a connectivity issue that caused the problem.
The TCP packet out-of-state error can happen as a result of that (some connection "timed out").

That said, it's probably worth double-checking the key renegotiation settings to make sure they're the same on both ends.