Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 1237 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Drop several initial packet from vpn site to site

Tri Nguyen2

I have configured an IPSec VPN site-to-site connection between two sites, and after that, the ping traffic was going through between the sites. However, about 10 minutes later, when I pinged again to check, there were always a few initial packets that were dropped and the packet capture showed that traffic was blocked due to a violation.

This issue is affecting my time attendance devices. Do you have any ideal on this error?



This thread was automatically locked due to age.
Parents
  • +1

    I have try to bypass stateful firewall from subnet 172.16.0.0/12 to attendance ip 10.16.16.199 via conssole and it work now. 

    set advanced-firewall bypass-stateful-firewall-config add source_network 172.16.0.0 source_netmask 255.240.0.0 dest_network 10.16.16.199 dest_netmask 255.255.255.255

Reply
  • +1

    I have try to bypass stateful firewall from subnet 172.16.0.0/12 to attendance ip 10.16.16.199 via conssole and it work now. 

    set advanced-firewall bypass-stateful-firewall-config add source_network 172.16.0.0 source_netmask 255.240.0.0 dest_network 10.16.16.199 dest_netmask 255.255.255.255

Children
No Data
Unfiltered HTML