> Source: [sk101232](https://support.checkpoint.com/results/sk/sk101232)

# sk101232 - Connections are dropped as Out-of-State after some idle time when SecureXL is enabled

| Property | Value |
|----------|-------|
| Solution ID | sk101232 |
| Date Created | 2014-06-10 |
| Last Modified | 2017-05-27 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Connections are dropped as Out-of-State after some idle time when SecureXL is enabled.

  SmartView Tracker log shows:

  ```
  
  Type = Log
  Action = Drop
  Protocol = tcp
  Information = TCP packet out of state: First packet isn't SYN
  Product = Security Gateway/Management
  Product Family = Network
  ```

* SecureXL debug ('`fwaccel dbg -m general + offload`') shows:

  `;get_conn_idle_timeout: idle timeout (XXXs) too big for device to detect (max. 43200s). Not offloading with idle_timeout.;`

## Cause

Session Timeout for a service is set to a value greater than the maximal SecureXL timeout of 43200 seconds, and the connection was processed by SecureXL based on Template with PSL.

After period of PSL expiration, the PSL data is deleted because the connection was not notified to the Firewall.  
Therefore, the next packet for this connection will be Forwarded to Kernel (F2F). Since no PSL data exists, the Firewall will drop this connection as Out-of-State because no notification was received for it.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content