> Source: [sk126212](https://support.checkpoint.com/results/sk/sk126212)

# sk126212 - FWD process is down on 1 or more Virtual Systems

| Property | Value |
|----------|-------|
| Solution ID | sk126212 |
| Date Created | 2018-05-14 |
| Last Modified | 2020-07-07 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * FWD process is down on 1 or more Virtual Systems. Example output from FWD debugs 
  (according to [sk86321](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk86321)):  


  `[FWD PID]@vsx-module1[DATE TIME] KluGatherDictionaries: failed to open file /opt/CPsuite-R77/fw1/CTX/CTX00028/database/inspect.lf
  `  
  `[FWD PID]@vsx-module1[DATE TIME] FwKluInitUnificationEngine: failed !!!
  `  
  `[FWD PID]@vsx-module1[DATE TIME] fw_get_connected_unix: failed to connect to /vs28/dev/fw6v0: Connection refused`

* Output of "cphaprob -i list" command shows:

  <br />


  `Device Name: fwd`  
  `
  Current state: problem`  
  `
  Process Status: NOT UP`

* Output of "cpwd_admin list" command shows that FWD daemon is Terminated on 1 or more Virtual Systems. Example:

  ```
  
  [Expert@HostName:0]# cpwd_admin list | grep -E "STAT|FWD"
  APP  CTX  PID  STAT  #START  START_TIME  MON  COMMAND
  
  FWD  27  21659  E    1       [19:13:09] 6/5/2018  N  fwd
  FWD  28         T    1       [19:13:09] 6/5/2018  N  fwd
  ```

  <br />

## Cause

This issue is typically seen after a rebuild of the VSX gateway. If the ***inspect.lf*** file is missing or does not match the md5sum within other virtual systems. This indicates the issue is caused by VS database corruption.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content