CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: BOOTP Drop

Hybrid View

  1. #1
    Join Date
    2009-06-30
    Posts
    14
    Rep Power
    0

    Default BOOTP Drop

    I have an odd situation, apparently with IPS. I have an open ticket with CP, but no resolution yet. I get this error for one remote router only. Any chance anyone has seen this before?

    ;[cpu_0];fw_log_drop: Packet proto=17 10.x.y.z:67 -> 10.x.a.b:67 dropped by fwpslglue_chain Reason: PSL Drop: ASPII_MT;

    It is a DHCP request from the remote router and tracker shows the packet accepted, but then it gets dropped in the ASPII mod.

    I have tried - updating defs, creating a new IPS profile and applying, creating a custom service, creating a network exception in IPS - all with no result.

    I have hundreds of other sites that get DHCP no problem, just this one site is getting dropped. The remote routers are configured as DHCP relay so the CP is just passing the traffic along.

    Thanks for any input.

    Rich

  2. #2
    Join Date
    2009-06-30
    Posts
    14
    Rep Power
    0

    Default Re: BOOTP Drop

    This is resolved. It turned out to be a corrput IPS profile. Thanks.

  3. #3
    Join Date
    2018-05-13
    Posts
    15
    Rep Power
    0

    Default Re: BOOTP Drop

    I am having the exact same issue and I wasn't able to resolve it by turning off the IPS.

Similar Threads

  1. Telnet Timeout - Drop
    By ktsummey in forum Check Point SecurePlatform (SPLAT)
    Replies: 5
    Last Post: 2010-05-15, 10:01
  2. Drop in-progress connection
    By ttran in forum Check Point Safe@Office Appliances
    Replies: 0
    Last Post: 2009-11-06, 02:56
  3. R65 drop alerts
    By riddaz84 in forum SmartView Tracker
    Replies: 1
    Last Post: 2008-10-01, 08:48
  4. R60-R65 upgrade ssl drop
    By kevindri in forum SNX - SSL Network Extender
    Replies: 4
    Last Post: 2008-02-04, 17:56
  5. Check Point as a BOOTP/DHCP Relay router?
    By GordonCopestake in forum Miscellaneous
    Replies: 5
    Last Post: 2007-08-14, 02:47

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •