This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Invalid TCP state.

Have three static routes for the LAN network. We can ping from the the IP that is in the static route system but we cannot HTTPs or any other application. We get an Invalid TCP state but than other times it shows as being allowed. We have a firewall rule to allow these network to talk to each other.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 2 years ago in reply to rfcat_vk +1 suggested

Invalid TCP state is sometimes asymmetrical routing. Means the packet arrives from a different interface, as the firewall expect. If the old firewall was a different IP address, the routing is messed up…

Parents

0 LuCar Toni over 2 years ago

Do you run V18.5 MR2 ?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Ronnie Hicks1 over 2 years ago in reply to LuCar Toni

Not sure at this time it was V18.5, the customer had to take it offline and put the old firewall back on.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Ronnie Hicks1

Often times, this is some sort of routing issue. So check the switches and routers in between. If you start to do asymmetrical routing, resolve this.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 2 years ago in reply to LuCar Toni

Why does it work with the old firewall in the network and not the new one running v18.5.2?

I have the same issue with my XG115w running v18.5.2 and that is with direct connections to the XG, no switches involved. I do not see the same issue using v19 EAP.

Ian

XG115W - v20 GA - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to rfcat_vk

Invalid TCP state is sometimes asymmetrical routing. Means the packet arrives from a different interface, as the firewall expect. If the old firewall was a different IP address, the routing is messed up in some installations.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Reply

0 LuCar Toni over 2 years ago in reply to rfcat_vk

Invalid TCP state is sometimes asymmetrical routing. Means the packet arrives from a different interface, as the firewall expect. If the old firewall was a different IP address, the routing is messed up in some installations.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel

Children

No Data