> Source: [sk179267](https://support.checkpoint.com/results/sk/sk179267)

# sk179267 - Security Gateway drops traffic sent to cws.checkpoint.com

| Property | Value |
|----------|-------|
| Solution ID | sk179267 |
| Date Created | 2022-05-19 |
| Last Modified | 2022-05-23 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- The Security Gateway drops around 10 connections per hour with this log:
\>p\>Description: FIN-ACK dropped - First packet isn't SYN  
Source: FireWall   
Destination: CheckPoint Cloud cws.checkpoint.com

<br />

Example:
![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1652955432098/SK1202205191324041.png)

## Cause

Chain of events:

1. RAD on the Security Gateway is initializing a connection to cws.checkpoint.com
2. It takes a long time for the server *cws.checkpoint.com* to reply to the Security Gateway
3. TCP SYN state reaches a timeout
4. The Security Gateway deletes this connection from the Connections table
5. When the server *cws.checkpoint.com* responds, the Security Gateway cannot match the TCP ACK from the server to any existing connection and drops this TCP ACK as out of state
6. RAD on the Security Gateway send TCP FIN packet
7. The Security Gateway cannot match the TCP FIN to any existing connection and drops this TCP ACK as out of state

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content