> Source: [sk100535](https://support.checkpoint.com/results/sk/sk100535)

# sk100535 - The maximum concurrent connections limit is 100 more than the output of "vsx stat -l" or SNMP

| Property | Value |
|----------|-------|
| Solution ID | sk100535 |
| Date Created | 2014-05-07 |
| Last Modified | 2018-12-26 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- The output of SNMP or `vsx stat -l` shows a connections limit which is 100 less than the concurrent connections limit on SmartDashBoard for a specific Virtual System.

## Cause

The value returned by `vsx stat -l` and snmp is the true connection limit.

There is a kernel parameter that represents a connection threshold that is subtracted from the administrator defined connection limit.

The kernel parameter is called *fwconn_tab_threshold* and defaults to 100.

It is recommended that this not be changed  
Before adding a new connection to the connections table, the firewall checks if the connections table has reached its limit.

In this check, the firewall must consider that the connections that were already added to other cluster members were not yet synched to this member. So the firewall makes a small correction to the connections table limit defined by the administrator.

It subtracts*fwconn_tab_threshold* from the administrator's limit, and this is the limit that is checked.

## Solution

To get a higher connection table limit, the administrator's defined connection table limit should be increased by 100.   

**Procedure:**

1. Open the Check Point Virtual System object window properties, go to the Optimizations tab and select:   

   "Capacity Optimization -\> Manually Limit the maximum concurrent connections to:"  

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk100535/Optimization1508100223.png)  

2. Increase the value in field by 100, i.e. from 15,000 to 15,100.  

3. Click OK and install the Security policy.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content