Security Gateway drops HTTP connections without the "Host" header after installing a Jumbo Hotfix Accumulator

Product: Security Gateways
Version: R81.10 (EOS), R81.20, R82, R82.10
OS: Gaia
Last Modified: 2025-11-05

Symptoms

• Security Gateway drops some HTTP requests after installing one of these Jumbo Hotfixes:
  • R82 Jumbo Hotfix Take 25
  • R81.20 Jumbo Hotfix Take 99
  • R81.10 Jumbo Hotfix Take 177
• The output of the "fw ctl zdebug + drop" command on the Security Gateway contains these drops:
  • fw_log_drop_ex: Packet proto=6 ... dropped by ... Reason: PSL Drop: WS
  • fw_log_drop_ex: Packet proto=6 ... dropped by ... Reason: PSL Reject: WS

Cause

Starting from these Jumbo Hotfix Accumulator Takes (PRHF-37149), the Security Gateway enforces RFC 2616 and drops HTTP requests that do not include the mandatory "Host" header.

Previously, this enforcement was more lenient, but it is now strictly validated by the Packet Streaming Library (PSL) component.

Solution

We're here for you

Please log in / sign in to view solution

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: Advanced
Status: Approved by TAC
Date Created: 2025-06-25
Last Modified: 2025-11-05