Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Louis_Poulin
Collaborator

Traffic is '...dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;'

Symptoms
  • Kernel debug (fw ctl debug -m fw + drop) shows: 

    fw_log_drop: Packet proto= ... dropped by fwpslglue_chain Reason: PSL Drop: UP_LIMIT;
  • Users trying to browse the web get timeout error messages in their web browser.

Setup is running R80.10 in a HA cluster (per state VS) and one Virtual System.

What does "PSL" means?

What does "UP_LIMIT" means?

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

PSL means "Passive Streaming Layer" which is a software component used by IPS, App Control, and others.

I would recommend engaging with the TAC: Contact Support | Check Point Software 

0 Kudos
KennyManrique
Advisor

Hello Louis,

I've seen the UP_LIMIT drop when there is a Limit defined on Application Control Policy. For example, you defined 500 Kbps for YouTube and that limit has been surpased, so the traffic is being dropped.

Regards.

0 Kudos
Morato
Participant

Hi Louis_Poulin, 

This  log UP_LIMIT is Traffic controlled by Limit in Application Control, you need verify the limit configured in rule. 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events