Thread: TCP sequence validator: dropped packet with invalid ACK number
View Single Post
  #2 (permalink)  
Old 2007-07-17
mcnallym mcnallym is offline
Senior Member
  
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: TCP sequence validator: dropped packet with invalid ACK number
Do you have IPSO Flows enabled on the Nokia. I see you are using IPSO 3.7 and Check Point R55, so the Nokia will be on IPSO flows to accelerate traffic rather then SecureXL.

If flows is enabled then disable the feature as not supported to have flows and sequence verifier enabled on the same box, or disable the sequence verifier.

I see that one is AIX and one is another flavour of UNIX. I have seen issues where different flavours of UNIX implement differently. I have seen issues similar to this with FTP Servers and clients as well.

Of course I presume that you realise that the hardware and the IPSO versions you are on are all out of support now for some time.
Reply With Quote