Symantec™ Security Gateways Reference Guide - Sawmill

168 Log messagesNotice messages (200-299)226 - Packet dropped because the packet is too large to be encapsulated for this tunnelDescription: The packet is dropped because the packet is too large to be encapsulated for this tunnel. This indicates aconfiguration error.226 - Packet dropped because the packet size is illegalDescription: The packet is dropped because it does not conform to the packet size limit.227 - VPN packet dropped because of an invalid SPI for tunnelDescription: The SPI value in the packet did not match the SPI value determined when the tunnel was created, so thepacket is dropped. This is a security check.227 - VPN packet dropped because authentication failed for tunnelDescription: When decrypting an incoming encrypted packet, the integrity check failed. Network hardware checksumerrors or packet tampering are possible causes.227 - VPN packet dropped because decapsulated packet does not match tunnel end points fortunnelDescription: When a packet was successfully decrypted, its source and/or destination IP address was not within thescope of the tunnel.227 - VPN packet dropped because decapsulated packet length exceeds encapsulated size fortunnelDescription: This message is logged when a VPN packet is dropped by the security gateway, as the packet is not formedcorrectly.227 - VPN packet dropped because decompressed packet is larger than the maximum allowedpacketDescription: The decompression process failed for a packet, so the packet was dropped.227 - VPN packet dropped because decompression failed for tunnelDescription: The decompression process failed for a packet, so the packet was dropped.227 - VPN packet dropped because decryption failed. Invalid format or length for tunnelDescription: When decrypting an incoming encrypted packet, the integrity check failed. Network hardware checksumerrors or packet tampering are possible causes.227 - VPN packet dropped because expected header was missingDescription: The encrypted packets that are received have a series of headers and one of the headers was not of the typeexpected.227 - VPN packet dropped because IP payload compression is not supported by this releaseDescription: Packets entering a tunnel undergo the encapsulation process, which includes applying a valid compressionmethod. In this case, the IP payload compression method is not supported in the current release, so theVPN packet is dropped by the security gateway. This occurs because of a misconfiguration.