Traffic is '...dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;'

[Louis_Poulin]

Symptoms

• Kernel debug (fw ctl debug -m fw + drop) shows: 
  
  fw_log_drop: Packet proto= ... dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;
• Users trying to browse the web get timeout error messages in their web browser.

Setup is running R80.10 in a HA cluster (per state VS) and one Virtual System.

What does "PSL" means?

What does "UP_LIMIT" means?

[PhoneBoy]

PSL means "Passive Streaming Layer" which is a software component used by IPS, App Control, and others.

I would recommend engaging with the TAC: Contact Support | Check Point Software 

[KennyManrique]

Hello Louis,

I've seen the UP_LIMIT drop when there is a Limit defined on Application Control Policy. For example, you defined 500 Kbps for YouTube and that limit has been surpased, so the traffic is being dropped.

Regards.

[Morato]

Hi Louis_Poulin, 

This  log UP_LIMIT is Traffic controlled by Limit in Application Control, you need verify the limit configured in rule.