> Source: [sk140432](https://support.checkpoint.com/results/sk/sk140432)

# sk140432 - "NAT Hide failure - there are currently no available ports for hide operation" appears in SmartLog

| Property | Value |
|----------|-------|
| Solution ID | sk140432 |
| Date Created | 2018-11-18 |
| Last Modified | 2025-01-22 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- "NAT Hide failure - there are currently no available ports for hide operation" appears in SmartLog.

## Cause

The number of connections with the same Hide IP address, to the same destination IP address, exceeds the number of available NAT ports.

Limitation - Security Gateway has a maximum of 50,000 ports for each NAT pool - **\<hide ip, destination, IP Protocol\>**.

Therefore, it is possible to have more than 50,000 simultaneous NATed connections. As a result, a Security Gateway might exhaust available NAT ports, because it hides all the networks behind one IP address (that of the Security Gateway), and maps all the connections to the same NAT pool.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content