Skip to main content
greminn
New Member
November 11, 2014
Question

Files were dropped by quard to xfer-fas: 0 reached max retries, 1 reached TTL.

  • November 11, 2014
  • 1 reply
  • 15043 views

Hi There, Im using one of our (now) redundant 80C's on my home fibre connection. We are using 5.2.1. and it is connected to a IPS-supplied fibre ONT. We have had a couple of outages lately... and seeing this in the logs. This appears when we are experiencing the outage.

 

1 files were dropped by quard to xfer-fas: 0 reached max retries, 1 reached TTL.

2 files were dropped by quard to xfer-fas: 0 reached max retries, 2 reached TTL.

2 files were dropped by quard to xfer-fas: 0 reached max retries, 2 reached TTL.

2 files were dropped by quard to xfer-fas: 0 reached max retries, 2 reached TTL. And so on (kind of every 10 mins during the outage)

 

Looking the details of the message, it lists the Reason as: poor-network-condition - From this im thinking that it is something todo with the fibre ONT. Anyh thoughts? 

 

Any info is much appreciated! :) I have attached a screenshot for reference.

 

BTW: What a great error message! I would hate to be dropped by anything called a quard 

1 reply

Jeff_FTNT
Staff
Staff
November 12, 2014

You may enable "log to FortiAnalyzer" and send AV quarantine/IPS packet Log/DLP archive file to FortiAnalyzer.

For some reason, FortiAnalyzer can not handle those request or FGT is too busy to handle (like memory is high), FGT will fail to transfer AV quarantine/IPS packet Log/DLP archive filen to FortiAnalyzer.

 

Hope it will be helpful, thanks.