> Source: [sk168692](https://support.checkpoint.com/results/sk/sk168692)

# sk168692 - The FWD process stops working randomly on Security Group Members on Scalable Chassis and Maestro 

| Property | Value |
|----------|-------|
| Solution ID | sk168692 |
| Date Created | 2020-09-06 |
| Last Modified | 2021-03-07 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R82.20, R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * FWD process randomly stops working on the Security Group Members and causes a cluster failover.
* "`[INFO] Process FWD (pid = XXX) exited with exit_code 1`" message in the `$FWDIR/log/fwd.elg` file on Security Group Members.
* "`T_get_event: cannot register socket XXX (1024 sockets already registered for in)`" in the `$FWDIR/log/fwd.elg` file on Security Group Members.
* A reboot of Security Group Members resolves the issue for a few hours or days.

## Cause

The FWD process cannot handle more than 1024 connections and fails.

The FWD process is critical for cluster operation. Therefore, a cluster failover occurs when this process fails.

<br />

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue. A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

The hotfix requires you to configure a new environment variable **EPOLL_DISABLE_FWD** to enable the Linux EPOLL API for the FWD process.

With this API, a process monitors for one of a set of file descriptors to become ready to perform I/O (for more information, see <https://linux.die.net/man/7/epoll> and <https://linux.die.net/man/2/select>).

**Procedure:**

1. Install the required hotfix on all Security Group Members.

2. Connect to the command line on one of the Security Group Members.

3. Log in to the Expert mode.

4. Edit the*$CPDIR/tmp/.CPprofile.sh* file:

   `vi $CPDIR/tmp/.CPprofile.sh`
5. Add this line at the end:

   `EPOLL_DISABLE_FWD=FALSE; export EPOLL_DISABLE_FWD`
6. Save the changes and exit the Vi editor.

7. Copy the modified file to all Security Group Members:

   `asg_cp2blades $CPDIR/tmp/.CPprofile.sh`
8. Reboot all Security Group Members:

   `reboot -b all`
9. Confirm that the new environment variable is loaded:

   `g_all echo $EPOLL_DISABLE_FWD`

   The output for all Security Group Members must show:

   `FALSE`

**Related SK Articles:**

* [sk163413 - CPD, FWD, and FWM processes on Management Server or Security Gateway randomly crash and cannot start](https://supportcontent.checkpoint.com/solutions?id=sk163413)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content