> Source: [sk173324](https://support.checkpoint.com/results/sk/sk173324)

# sk173324 - Drop log for connection that is accelerated by fast_accel

| Property | Value |
|----------|-------|
| Solution ID | sk173324 |
| Date Created | 2021-05-02 |
| Last Modified | 2021-05-12 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Drop log is found in SmartLog for traffic that is accepted when fast_accel is enabled.

* In the drop log content:  

  ` Connection terminated before detection: Insufficient data passed.`  
  `OM: To learn more see sk113479.`  

  ` Firewall Message: Connection accelerated by fast_accel `

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk173324/drop2_log202105051200191.png)

## Cause

Fast Accel relies on the rulebase match of the ?rst packet to decide if the connection is passing the rulebase. In case that a possible match is returned by Uni?ed Policy (See [sk120964](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120964)), fast_accel accelerates the connection as trusted.

When the connection is closed, because of the product design - the Uni?ed Policy is not aware that fast_accel accelerated this connection, and tries to ?nalize a log. In some policy con?gurations the Unified Policy can ?nalize a match on a drop rule as a full match and creates a drop log.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content