> Source: [sk175268](https://support.checkpoint.com/results/sk/sk175268)

# sk175268 - Multiple drops logs from a Security Group on Scalable Chassis - "FW1_newsync Traffic Dropped from 8.7.6.5 to 4.3.2.1"

| Property | Value |
|----------|-------|
| Solution ID | sk175268 |
| Date Created | 2021-09-01 |
| Last Modified | 2021-09-05 |
| Technical Level | Advanced |
| Products | Scalable Platforms |
| Versions | R82, R81.20 |
| OS | Gaia |
| Platform | 64000 |

## Symptoms

- * <br />

  SmartConsole \> Logs and Monitor \> "Logs" shows multiple drops logs:

  <br />

  Description - FW1_newsync Traffic Dropped from 8.7.6.5 to 4.3.2.1  

  Origin - Security Group on a Scalable Chassis  

  Blade - Firewall  

  Product Family - Access  

  Type - Connection  

  Source - 8.7.6.5  

  Source Port - 8116  

  Service - FW1_newsync (UDP/8116)  

  Interface - Mgmt  

  Destination - 4.3.2.1  

  Action - Drop
* There is no impact on the environment.

## Cause

By design, the Scalable Chassis sends these MAC address learning packets to learn the MAC addresses of slave interface in the MAGG bonding group.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content