cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

TCP packet out of state: First packet isn't SYN

Hi -

I have a firewall in cluster with R77.20, one of interface traffic in not working after failover (active to standby)

I checked routing and all configuration, all looks good.

while we capture the traffic its showing

(TCP packet out of state: First packet isn't SYN tcp_flags: PUSH-ACK)

I also try to disable statefull packet inspection from global property.

Please provide us solution for this.

3 Replies
Admin
Admin

Re: TCP packet out of state: First packet isn't SYN

That suggests the traffic in question isn't getting synced to the other cluster member.

Or that the connection "timed out" and it just happened to do so during the failover.

0 Kudos

Re: TCP packet out of state: First packet isn't SYN

When traffic is bpassing through primary firewall every thing is working, when any of the reason if failover heppen and traffic shifted to secondary firewall then one of interface traffic is not working and getting tcp sync error.

0 Kudos
Danny
Jade

Re: TCP packet out of state: First packet isn't SYN

And as a side note: R77.20 is out of support since 2017. You may first want to upgrade to a supported release before disabling stateful inspection.