Firewall drops Packets due to Invalid TCP reserved bit

Question

Hello, 
 we switched from SG to XGS recently. We do have data loggers in branch offices, which communicate by ipsec with our head office. Pakets from a specific brand of these dataloggers are dropped by the xgs. 
 Reason given for dropping these packets is 'Invalid TCP reserved bit.'. A packet Trace shows that one reserved Bit is set to one (000100 in binary.) 
 Is it possible to tell the firewall to ignore this violation of the rfc for TCP ? 
 And if so, how ? 
 Btw: SG routed these packets

Wayne Folta · Answer

It appears that there may be a solution in another thread, though the Sophos person said it "might" work and the OP didn't reply back whether it solved the problem or not: 
 You can try to work around by creating an exception on the specific rule for this device from the console 
 console> set ips ac_atp exception fwrules XX (Where XX is the Firewall Rule ID) 
 However this might not work but you can give it a try, or you would need to route the traffic via a Cisco device. 
 https://community.sophos.com/sophos-xg-firewall/f/discussions/129786/invalid-tcp-reserved-bit-problem

Firewall drops Packets due to Invalid TCP reserved bit

Submitted a Tech Support Case lately from the Support Portal?