> Source: [sk171550](https://support.checkpoint.com/results/sk/sk171550)

# sk171550 - Remote Access client with enforced SCV intermittently loses access to internal resources

| Property | Value |
|----------|-------|
| Solution ID | sk171550 |
| Date Created | 2021-01-17 |
| Last Modified | 2021-10-21 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Gaia |

## Symptoms

- * Remote Access client with enforced SCV loses access to internal resources intermittently. Access is restored by disconnecting and reconnecting to the VPN.
* SmartConsole logs show frequent "No scv status from client..." drop logs for the affected users.
* The issue begins after the user attempts to access an internal resource, where the Security Gateway performs Static NAT on the destination IP address.
* Kernel debug shows an ICMP type 3 code 3 message with the source address of the NAT IP address of the internal resource. Destination of the Remote Access client's Office Mode IP address is being dropped with action "VANISH":  
  `fw_log_drop_ex: Packet proto=1 X.X.X.X:771 -> 172.16.10.1:32678 dropped by fw_first_packet_state_checks Reason: ICMP error does not match an existing connection;
  fw_handle_first_packet: first packet state violation (action=VANISH);`
* Make sure office mode network is not added into RA VPN encryption domain

## Cause

The dropped ICMP error indicates an issue with the SCV keepalive packet. When this happens, the gateway cannot validate the client's compliance status, so the user loses access to internal resources.

<br />

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170114) starting from Take 25
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 114
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 235
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 202

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

**Related solution:** [sk108839 - SCV packets are dropped when using](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108839&partition=Advanced&product=Endpoint)[custom](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108839&partition=Advanced&product=Endpoint)[SCV file for Client Compliance](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108839&partition=Advanced&product=Endpoint)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content