> Source: [sk176371](https://support.checkpoint.com/results/sk/sk176371)

# sk176371 - Security Group Member / Security Gateway Module (SGM) is stuck in a boot loop and stays in the DOWN state

| Property | Value |
|----------|-------|
| Solution ID | sk176371 |
| Date Created | 2021-12-21 |
| Last Modified | 2021-12-23 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Security Group Member / Security Gateway Module (SGM) is stuck in a boot loop and stays in the DOWN state after five reboot attempts.

* This issue occurs only if the Identity Awareness Software Blade is enabled on the Security Group.

## Cause

Inconsistency between the *$FWDIR/modules/fwkern.conf* file on the Security Group Member / Security Gateway Module (SGM) and the same file on the SMO that is caused by the Identity Awareness Software Blade.

## Solution

This problem was fixed. The fix is included starting from:

* [Jumbo Hotfix Accumulator for R80.30SP](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skXXX) starting from Take 97
* [Jumbo Hotfix Accumulator for R80.20SP](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=skXXX) starting from Take 326

Check Point recommends to always upgrade to the most recent version.

<br />

**If it is not possible to upgrade, this workaround is available:**

Make sure the `nac_max_enforced_identities` parameter is the last parameter in the *fwkern.conf*file on the Security Group Members:

1. Connect to the command line on the Security Group.

2. If your default shell is Gaia gClish, then log in to the Expert mode:

   `expert`
3. Paste and run this long command to move the kernel parameter to the bottom of the *fwkern.conf* file:

   ``nac_line=`grep nac_max_enforced_identities $FWDIR/modules/fwkern.conf` ; grep -v nac_max_enforced_identities $FWDIR/modules/fwkern.conf > /tmp/fwkern.conf_TMP ; mv /tmp/fwkern.conf_TMP $FWDIR/modules/fwkern.conf ; echo $nac_line >> $FWDIR/modules/fwkern.conf ; cat $FWDIR/modules/fwkern.conf``
4. Copy the updated *fwkern.conf* file to all other Security Group Members:

   `asg_cp2blades $FWDIR/modules/fwkern.conf`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content