> Source: [sk103496](https://support.checkpoint.com/results/sk/sk103496)

# sk103496 - Number of concurrent connections shown in CPView Utility depends on the status of SecureXL

| Property | Value |
|----------|-------|
| Solution ID | sk103496 |
| Date Created | 2014-11-24 |
| Last Modified | 2016-08-07 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * The number of concurrent connections shown in [CPView Utility](http://supportcontent.checkpoint.com/solutions?id=sk101878) is less than shown in the output of '`fw ctl pstat`' or in the output of '`fw tab -t connections -s`' command.

* The number of concurrent connections shown in [CPView Utility](http://supportcontent.checkpoint.com/solutions?id=sk101878) differs depending on whether SecureXL is enabled or disabled.

## Cause

The command '`fwaccel stats`' (counter "`C total conns`") shows the connections in SecureXL FWAccel module.  
The command '`fw ctl pstat`' (counter "`Concurrent Connections`") shows the connections in FW module.

CPView Utility is designed to show the actual amount of connections that currently pass through the Security Gateway. This counter is adjusted according to which Check Point kernel module is handling the traffic:

* When SecureXL is *enabled* , CPView Utility shows the connections from the *SecureXL FWAccel* module (run the command *fwaccel stats \| grep "C total conns"*)
* When SecureXL is *disabled* , CPView Utility shows the connections from the *FW* module (run the command *fw tab -t connections -s* and refer to *#VALS* column)

The difference in the number of connections when SecureXL is enabled or disabled is due to the fact that:

* SecureXL SIM module does *not* show certain connections - e.g., ClusterXL synchronization connections.
* FW module does *not* show certain connections - e.g., Delayed connections.

In addition, the big difference between the output of '`fwaccel conns -s`' command and output of '`fwaccel stats | grep "C total conns"`' is due to the fact that the command '`fwaccel conns -s`' shows both Client-to-Server ***and*** Server-to-Client connections, while the command '`fwaccel stats grep "C total conns"`'\| compresses these connections into *one* connection.

## Solution

No fix is required; the system is functioning as designed.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content