Anti-Bot Blade generates error logs with the reason "Failed to Decrypt CP Site Response"

Product: Anti-Bot
Version: R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20
OS: Gaia
Last Modified: 2025-05-01

Symptoms

• SmartConsole shows these Anti-Bot logs:

• Log Info:

  • Blade: Anti-Bot
  • Product Family: Threat
  • Type: System Alert
  • Forensics Details:
    • Description: Error occur while accessing:<URL>
    • Reason: Failed to Decrypt CP Site Response., check /opt/CPSuite-<VERSION>/fw1///log/rad_events/Errors/flow_<NUMBER> For more details

Example:

• There are RAD log files in the $FWDIR/log/rad_events/Errors/ directory on the Security Gateway.

• RAD error logs ($FWDIR/log/rad_events/Errors/flow_<NUMBER>) contain lines like these:

[rad_decrypted_response_task.cpp:134] CRadDecryptedResponseTask::decrypt: [ERROR] response size is 1030496' code limit to 1000000

[rad_decrypted_response_task.cpp:80] CRadDecryptedResponseTask::getResponseString: [ERROR]  failed to decrypt response 0xdc21b440

[rad_response_task.cpp:67] CRadResponseTask::run: [ERROR] can not get response string

Cause

The RAD decrypt function cannot handle a payload larger than 1,000,000 bytes.

Because of that, the response from ThreatCloud cannot be decrypted, the Anti-Bot Software Blade cannot properly analyze its content and shows an error.

Solution

We're here for you
Please log in / sign in to view solution

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: Advanced
Status: Approved by TAC
Date Created: 2024-07-25
Last Modified: 2025-05-01