Skip to main content
JPM
JPM
New Member
August 7, 2014
Question

" no session matched" message

  • August 7, 2014
  • 13 replies
  • 37193 views
Hi, I am hoping someone can help me. We get a " no session matched" (log_id=0038000007) message several thousand times a day for various different connections on our Fortigate 310B (4.0 MR3 patch 9) I believe this is caused by the anti replay setting which we could disable but I wanted to ask if it is safe to disable this setting or if there is some other setting which could be causing this message to be logged so many times per day. We also receive the message " replay packet(allow_err), drop" (log_id=0038000007) several thousand times a day which appears to be related to the same issue. If anyone can help with this I would appreciate it. Regards, JP

    13 replies

    Show previous replies
    JPM
    JPMAuthor
    New Member
    August 13, 2014
    Is it safe to turn this option off? What are the consequences?
    netmin
    netmin
    New Member
    August 15, 2014
    So...have you checked if the server/application on the mentioned IP logs any errors? The trace looks like the connections continue sending data bidirectionally without a valid session. If no errors are reported (and no network loops/overlapping networks discovered) this might be related to a bug (similar issues were reported on slightly older firmware revisions) so that you should upgrade the firmware as already suggested by Ede.
    JPM
    JPMAuthor
    New Member
    August 15, 2014
    Hi, Yes I have checked the server and application logs and there does not appear to be any issues there. I will schedule a firmware upgrade of the firewalls and if this resolves this issue I will come back to the form and update his topic. Thank you everyone for your input - hopefully firmware upgrade will resolve this issue JP
    Terms & ConditionsAccessibility statement