CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.

First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E


Results 1 to 3 of 3

Thread: BOOTP Drop

  1. #1
    Join Date
    Rep Power

    Default BOOTP Drop

    I have an odd situation, apparently with IPS. I have an open ticket with CP, but no resolution yet. I get this error for one remote router only. Any chance anyone has seen this before?

    ;[cpu_0];fw_log_drop: Packet proto=17 10.x.y.z:67 -> 10.x.a.b:67 dropped by fwpslglue_chain Reason: PSL Drop: ASPII_MT;

    It is a DHCP request from the remote router and tracker shows the packet accepted, but then it gets dropped in the ASPII mod.

    I have tried - updating defs, creating a new IPS profile and applying, creating a custom service, creating a network exception in IPS - all with no result.

    I have hundreds of other sites that get DHCP no problem, just this one site is getting dropped. The remote routers are configured as DHCP relay so the CP is just passing the traffic along.

    Thanks for any input.


  2. #2
    Join Date
    Rep Power

    Default Re: BOOTP Drop

    This is resolved. It turned out to be a corrput IPS profile. Thanks.

  3. #3
    Join Date
    Rep Power

    Default Re: BOOTP Drop

    I am having the exact same issue and I wasn't able to resolve it by turning off the IPS.

Similar Threads

  1. Telnet Timeout - Drop
    By ktsummey in forum Check Point SecurePlatform (SPLAT)
    Replies: 5
    Last Post: 2010-05-15, 10:01
  2. Drop in-progress connection
    By ttran in forum Check Point Safe@Office Appliances
    Replies: 0
    Last Post: 2009-11-06, 02:56
  3. R65 drop alerts
    By riddaz84 in forum SmartView Tracker
    Replies: 1
    Last Post: 2008-10-01, 08:48
  4. R60-R65 upgrade ssl drop
    By kevindri in forum SNX - SSL Network Extender
    Replies: 4
    Last Post: 2008-02-04, 17:56
  5. Check Point as a BOOTP/DHCP Relay router?
    By GordonCopestake in forum Miscellaneous
    Replies: 5
    Last Post: 2007-08-14, 02:47


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts