[USG FLEX H]Intranet traffic have issue need to disable secure-policy as workaround.

Zyxel_Kevin
Posts: 958
Zyxel Employee





in Networking
Symptom:
There's an access issue between LANs or VLANs; ping and UDP traffic is working, only TCP have problem.
Solution:
Typically, this is because the connection did not establish on Firewall. The SYN-ACK reply isn't being observed on the firewall interface.
We can't disable this mechanism. This behavior is unusual for most security devices, please check your network topology/routing
Checking:
1)Enable debug level of "Security Policy Control"
2)You will see lots of log "Invalid state detected DROP" regarding to your source /destination
0
Categories
- All Categories
- 435 Beta Program
- 2.7K Nebula
- 183 Nebula Ideas
- 120 Nebula Status and Incidents
- 6.2K Security
- 439 USG FLEX H Series
- 299 Security Ideas
- 1.6K Switch
- 80 Switch Ideas
- 1.2K Wireless
- 44 Wireless Ideas
- 6.7K Consumer Product
- 276 Service & License
- 433 News and Release
- 88 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 84 About Community
- 91 Security Highlight