> Source: [sk166655](https://support.checkpoint.com/results/sk/sk166655)

# sk166655 - VPN traffic randomly fails even though encrypted and decrypted traffic appears in logs and debugs

| Property | Value |
|----------|-------|
| Solution ID | sk166655 |
| Date Created | 2020-05-04 |
| Last Modified | 2021-03-29 |
| Technical Level | General |
| OS | Gaia |

## Symptoms

- * VPN traffic randomly fails even though encrypting and decrypting of traffic is seen in logs and debugs.
* Turning SecureXL off resolves the issue. Even if SecureXL is toggled off and then, on the issue is corrected.
* Issue can possibly be replicated by a fail over event.
* In kernel debugs the following is seen;  
  \[kern\];\[tid_0\];\[SIM-206126631\];ip_route_output_key_ng: Can't find route, ip_route_me_harder() failed. saddr=0 daddr=a31e8da6 tos=0 oif=0;  
  \[kern\];\[tid_0\];\[SIM-206126631\];get_routing_info: ip_route_output_lookup failed src:0 dst:a31e8da6 vsid:2;  
  \[kern\];\[tid_0\];\[SIM-206126631\];do_enc_routing: SIMROUTE_LOOKUP_ERROR, rc(3) is converted to SIMPKT_IN_DROP;

## Cause

Routing failure within SecureXL in VSX/VSLS environments.

<br />

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) since Take 210 - only for Gaia 3.10
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456&partition=Basic&product=All) since Take 38

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Note:** Issue is relevant to Gaia kernel 3.10 only.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content