Problem and solution when TCP services are interrupted intermittently when fast backup is enabled on the USG and incoming and outgoing packets are forwarded by active and standby USGs?

If the TCP SYN packet passes through one firewall in hot standby networking and the SYN-ACK packet through the other one but the session table is not yet backed up, the packet is discarded due to status error. When incoming and outgoing packet paths are different and the traffic is relatively heavy, certain services may be interrupted intermittently due to backup delay. If this exerts severe impacts on services, disable link status check.

Scroll to top