> Source: [sk177032](https://support.checkpoint.com/results/sk/sk177032)

# sk177032 - ICMP Request is dropped by implied rule unexpectedly

| Property | Value |
|----------|-------|
| Solution ID | sk177032 |
| Date Created | 2022-02-16 |
| Last Modified | 2022-02-16 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * The "Accept ICMP requests" is enabled under Global Properties, but some icmp traffic is dropped by implied rule randomly.  

* Follow [sk141812](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110218&partition=Advanced&product=Quantum) to enable the logging of informative implied rules, then we saw the rule name is **\[Implied Rule - accept_icmp\]** :  

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk177032/icmp_implied_drop202112231821242.png)  

* CPVIEW\>Network\>Traffic shows high value on Capcacity drops.  

  ```
  Drops:

  Software Blades � � � � � � � �1,086
  Interface incoming drops �    �12
  Instance high CPU � � � �   � �0
  Rulebase � � � � � � � � �    �9
  Capcacity                      91,471
  SecureXL � � � � � � � � �    �0
  Drop out of state TCP � � �   �disabled
  First packets not SYN � � �   �0
  ```

* Command "***cpstat fw -f policy*** " in the related VS shows that the connections capacity limit has been triggered.  

  ```
  Peak num. connections: � � �14900
  Connections capacity limit: 14900
  ```

## Cause

The number of concurrent connections exceeds the value configured. If you run "***fw ctl zdebug + drop*** " when issue happened on the gateway, you will get the following drop message.

```
@;3008956;[vs_1];[tid_0];[fw4_0];fw_log_drop_ex: Packet proto=1 10.1.1.10:2048 -> 172.16.10.2:1944 dropped by fwconn_memory_check Reason: full connections table;
```

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content