> Source: [sk171963](https://support.checkpoint.com/results/sk/sk171963)

# sk171963 - Security Gateway does not close SSL connection with the server

| Property | Value |
|----------|-------|
| Solution ID | sk171963 |
| Date Created | 2021-02-12 |
| Last Modified | 2021-02-21 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81 (EOS) |
| OS | Gaia |

## Symptoms

- When HTTPS Inspection is enabled, the Security Gateway keeps the connection with the server even when the connection was closed by the client. The connections stay in the Connections kernel table (ID 8158) and may cause high CPU load on the Security Gateway.

## Cause

Check Point Active Streaming keeps the connection open between the Security Gateway and the Server. Check Point Active Streaming is responsible for initiating 2 connections:  

1. From the Security Gateway to the Client.
2. From the Security Gateway to the Server.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.   
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.   
For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content