> Source: [sk162892](https://support.checkpoint.com/results/sk/sk162892)

# sk162892 - Traffic intermittently dropped by: "fw_try_to_match_template Reason: failed to create conn from template"

| Property | Value |
|----------|-------|
| Solution ID | sk162892 |
| Date Created | 2019-10-21 |
| Last Modified | 2019-10-22 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- In a Hide NAT environment, traffic gets intermittently dropped. Running kernel debug ('fw ctl zdebug drop') the following drop is seen: `
`  
`@;189062;[vs_32];[tid_0];[fw4_0];cphwd_tmpl_conn_created: failed to add conn in connections table <dir 0, x.x.x.x:56916 -> y.y.y.y:443 IPP 6> flags:0x2010060 (try bdebug(D_CONN) to get more info);
`  
`@;189062;[vs_32];[tid_0];[fw4_0];fw_log_drop_ex: Packet proto=6 x.x.x.x:56916 -> y.y.y.y:443 dropped by fw_try_to_match_template Reason: failed to create conn from template

`

## Cause

The Security Gateway does not have a default route, but only a static route from a pre-NAT IP address range to the destination.

Once the hide NAT is performed, the Security Gateway no-longer has the infromation where to route the packet.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content