> Source: [sk148273](https://support.checkpoint.com/results/sk/sk148273)

# sk148273 - ccc_sessions table size increases till maximum limit even when "aggressive SLP" (Simultaneous Login Prevention) enabled 

| Property | Value |
|----------|-------|
| Solution ID | sk148273 |
| Date Created | 2019-03-01 |
| Last Modified | 2024-11-12 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Gaia |

## Symptoms

- ccc_sessions size gradually increases till maximum limit even when "aggressive SLP" enabled.  
Note: SLP = Simultaneous Login Prevention (Simultaneous login prevention enables a gateway to automatically disconnect a remote user who is logged in more than once.)

## Cause

The cookies are sent to deletion in the wrong order, resulting in failed deletion, and eventually the table reaches its size limit.

## Solution

This problem was fixed. The fix is included in:

* **[Check Point R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144293&partition=Basic&product=All)**
* **[Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 187**
* **[Jumbo Hotfix Accumulator for R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) starting from Take 288**

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

<br />

Once the fix is installed and the gateway rebooted, run the below registry command on the gateway to enable the "*aggressive slp disconnect* " feature. (When this feature is enabled inactive tunnels will be disconnected)

**# ckp_regedit -a SOFTWARE\\CheckPoint\\VPN1 aggresive_slp_sc_disconnect -n 1**

**To validate run:**

*\[Expert@Hostname:0\]# grep slp /var/opt/CPshrd-R80/registry/HKLM_registry.data*

*:aggresive_slp_sc_disconnect ("\[4\]1")*

* *\[4\]1* means it is enabled
* *\[4\]0* means it is disabled

<br />

The table maximum limit was also increased from 25k to 100k.

NOTE: Starting R81.10 this parameter is enabled by default (meaning the registry is 1 by default) but you still have to enable the simultaneous login prevention feature in Global Properties for it to work.  
**Related SKs**   

[sk174743 - The setting "User is allowed only single login" is not enforced correctly](https://support.checkpoint.com/results/sk/sk174743)  

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content