Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
StackCap43382
Contributor
Contributor

Possible SXL NAT Template Issue?

Hello,

We are observing the following log in /var/log/ increasing as increased traffic passes through the firewall.  

[fw4_2];fw_xlate_new_conn_from_template: invalid ifn. in_ifn = 15, out_ifn = -1

[fw4_1];fw_xlate_new_conn_from_template: invalid ifn. in_ifn = 15, out_ifn = -1

[fw4_3];fw_xlate_new_conn_from_template: invalid ifn. in_ifn = 15, out_ifn = -1

 

"-1" as a negative value indicates an invalid exit path interface and the traffic is being black-holed as a result. 

 

Am I right in thinking this is likely a SXL NAT Template issue? Cant find anything in the SKs regarding this specific error. 

It's an r80.10 HA deployment well behind in its patching. 

 

Anyone seen this before?

CCSME, CCTE, CCME, CCVS
0 Kudos
3 Replies
This widget could not be displayed.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events