
Root Cause
Tests were performed and the result indicated that when the post-NAT source port exceeded 61170, the packets from the server arrived on the USG with a checksum error. The incorrect checksum might be calculated on the server or the intermediate NAT device.

Suggestions
Pay attention to the correctness of fields in the IP and TCP/UDP headers during fault isolation.