> Source: [sk109596](https://support.checkpoint.com/results/sk/sk109596) # sk109596 - Various traffic issues on cluster due to FWD daemon taking all slots on cluster subscriber list | Property | Value | |----------|-------| | Solution ID | sk109596 | | Date Created | 2016-01-12 | | Last Modified | 2026-10-12 | | Technical Level | General | | Products | Security Gateway | | Versions | R82.10, R82, R81.20 | | OS | Gaia | ## Symptoms - * Various issues with traffic through a cluster: * Random traffic outages * Dynamic / Static routing stops working * Users are not recognized by Identity Awareness * All Identity Awareness commands on cluster members show: "`daemon did not respond or not running!`" * */var/log/messages* file on cluster members repeatedly shows: `FW-1: cxl_status_update_register: registering `*Name_of_Process*` not successful because too many processes are registered.` Examples: * `FW-1: cxl_status_update_register: registering pdpd not successful because too many processes are registered.` * `FW-1: cxl_status_update_register: registering pepd not successful because too many processes are registered.` * `FW-1: cxl_status_update_register: registering routed not successful because too many processes are registered.` * `FW-1: cxl_status_update_register: registering cprd PID 22279 not successful because too many processes are ` * `FW-1: cxl_status_update_register: registering cvpnd not successful because too many processes are registered.` ` ` * `FW-1: cxl_status_update_register: registering ted not successful because too many processes are registered.` * `FW-1: cxl_status_update_register: registering gated not successful because too many processes are registered.` registered. * After enabling generation of core dump files per [sk92764](http://supportcontent.checkpoint.com/solutions?id=sk92764) / [sk53363](http://supportcontent.checkpoint.com/solutions?id=sk53363), core dump files for various processes might be generated in the */var/log/dump/usermode/* directory: * fwd * routed * pdpd * pepd * cvpnd * gated * Output of "*cphaconf debug_data* " command (under cluster debug '`fw ctl debug -m cluster + conf`') on cluster members shows that cluster subscriber list is filled only with instances of FWD daemon. *Example*: ``` ;---- Status subscribers ---- ; ;Subscriber: 0 pid 5823 sig 18 desc fwd PID 5823; ;Subscriber: 1 pid 760 sig 1 desc fibmgrd; ;Subscriber: 2 pid 7268 sig 18 desc fwd PID 7268; ;Subscriber: 3 pid 5831 sig 18 desc fwd PID 5831; ;Subscriber: 4 pid 15189 sig 18 desc fwd PID 15189; ;Subscriber: 5 pid 10097 sig 18 desc fwd PID 10097; ;Subscriber: 6 pid 15839 sig 18 desc fwd PID 15839; ;Subscriber: 7 pid 23038 sig 18 desc fwd PID 23038; ;Subscriber: 8 pid 4106 sig 18 desc fwd PID 4106; ;Subscriber: 9 pid 29513 sig 18 desc fwd PID 29513; ;Subscriber: 10 pid 17118 sig 18 desc fwd PID 17118; ;Subscriber: 11 pid 27227 sig 18 desc fwd PID 27227; ;Subscriber: 12 pid 3092 sig 18 desc fwd PID 3092; ;Subscriber: 13 pid 23341 sig 18 desc fwd PID 23341; ;Subscriber: 14 pid 15326 sig 18 desc fwd PID 15326; ;Subscriber: 15 pid 13008 sig 18 desc fwd PID 13008; ``` ## Cause FWD daemon registers itself too many times to cluster status updates. As a result, it takes all the available 16 registration slots, preventing other daemon from registering. ## Solution This problem was fixed. The fix is included in: * [Check Point R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122485) * [Jumbo Hotfix Accumulator for R80.10 (R80_10_jumbo_hf)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) from Take 121 Check Point recommends to always upgrade to the most recent version ([upgrade Security Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=435) / [upgrade Cluster](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=428) / [upgrade Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=184) / [upgrade Multi-Domain Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=166)). If you do not wish to upgrade, or for **other [supported](http://www.checkpoint.com/support-services/support-life-cycle-policy/index.html) versions** , Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue. A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix. For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case. **Code was improved:** * FWD daemon will register only as "fwd", and not as "fwd PID ..." * If a process that is already registered to the cluster status updates tries to re-register, then the current entry on cluster subscriber list is overwritten (instead of failing the registration attempt) **Hotfix installation instructions for Gaia/SecurePlatform/IPSO/Crossbeam OS:** 1. Hotfix has to be installed on ***each cluster member*** . 2. Transfer the hotfix package to each cluster member (into some directory, e.g., */some_path_to_fix/* ). 3. Unpack the hotfix package: ***\[Expert@HostName\]# cd /some_path_to_fix/*** ***\[Expert@HostName\]# tar -zxvf fw1_wrapper_\.tgz*** 4. Install the hotfix: ***\[Expert@HostName\]# ./fw1_wrapper_\*** **Note:** The script will stop all of Check Point services (*cpstop* ) - read the output on the screen. 5. Reboot each cluster member. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content