> Source: [sk182954](https://support.checkpoint.com/results/sk/sk182954)

# sk182954 - Traffic over port 53 (DNS) drops with this error: "fwpslglue_chain Reason: PSL Drop: ASPII_MT when RAD hold mode on DNS traffic"

| Property | Value |
|----------|-------|
| Solution ID | sk182954 |
| Date Created | 2024-12-24 |
| Last Modified | 2024-12-31 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS) |

## Symptoms

- * Traffic over port 53 (DNS) drops with this error "*fwpslglue_chain Reason: PSL Drop: ASPII_MT*".

* `resource_classification_mode` for dns under *$FWDIR/conf/malware_config* is configured to "`hold`".  

  Note - This issue may also occur if `resource_classification_mode` is set to "`"policy"`' and the Threat Prevention engine session is configured to "`hold`" mode.

* The `tcpdump` on the interface that leads to the DNS servers shows only DNS queries and no responses.

* The Security Gateway is unable to resolve cws.checkpoint.com

* *$FWDIR/log/rad_events/Errors/* contains many files with this error:  

  "*FlowError=Failed to fetch Check Point resources. Couldn't resolve host name.*"

* Clients are unable to browse to http/https sites.

## Cause

The RAD (Resource Advisor) process sends queries to the cloud servers for categorization and reputation analysis. The administrator configured the Security Gateway to hold the DNS packets until RAD sends a response. When the Security Gateway cannot resolve `cws.checkpoint.com`, this causes the Security Gateway to hold the DNS packet for too long and drop them with the `PSL Drop: ASPII_MT` error.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content