> Source: [sk170673](https://support.checkpoint.com/results/sk/sk170673)

# sk170673 - "Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: 0-2000108)."

| Property | Value |
|----------|-------|
| Solution ID | sk170673 |
| Date Created | 2020-11-25 |
| Last Modified | 2023-11-07 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * "Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: 0-2000108)." error

  ![](https://sc1.checkpoint.com/sc//SolutionsStatics/sk170673/b1202011290954321.png)
* The following log is seen in `dmesg` or in *$FWDIR/log/fwk.elg* for USFW/VSX:  

  `"ld_gettab_entry_kbufs: falied to allocate kbuf of size "`.

* Following error in Cpview: `"SMEM FAILURES caller "fwhandle_put" failed"`

## Cause

The Fwhandle pool is full. Increasing the pool during install policy is without sleep which can cause failure above 4KB allocation.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R81.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk175186) starting from Take 14
* [Jumbo Hotfix Accumulator for R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114) starting from Take 51
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 150
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 241
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 203

<br />

If you choose not to upgrade, double the size of the fwhandle pool.

The default pool size value is 6553. You can increase it to 13106:

1. Create the file *$FWDIR/boot/modules/fwkern.conf* (if it does not already exist).

2. Add this line to the file you just created (no spaces are allowed)

   `fwhandle_prealloc_level=13106`
3. Save the file.

4. Reboot the Security Gateway.

5. Install the policy again and check if the issue is resolved.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content