> Source: [sk183728](https://support.checkpoint.com/results/sk/sk183728)

# sk183728 - Security Gateway does not decrease TTL in packets that go through SecureXL Medium Path

| Property | Value |
|----------|-------|
| Solution ID | sk183728 |
| Date Created | 2025-08-11 |
| Last Modified | 2026-02-18 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- Traffic capture with FW Monitor ([sk30583](https://support.checkpoint.com/results/sk/
sk30583)) or CPPCAP ([sk141412](https://support.checkpoint.com/results/sk/sk141412)) on the Security Gateway shows that the Time To Live (TTL) value does not decrement in some packets.

## Cause

When the Security Gateway R81.20 and R82 processes traffic in the Medium Path (as required by specific Software Blades), the Security Gateway may fail to decrement the TTL value in the packets.

Medium Path (PXL) is a packet flow when the packet is handled by the passive streaming layer, except for:

* IPS (some protections)
* VPN (in some configurations)
* Application Control
* Content Awareness
* Anti-Virus
* Anti-Bot
* HTTPS Inspection
* HTTP/HTTPS Proxy mode
* Mobile Access
* VoIP
* Web Portals for Software Blades

## Solution

This problem was fixed. The fix is included in:

* [Check Point Quantum R82.10](https://support.checkpoint.com/results/sk/sk183506)
* [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 73
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 122
* [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 183

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content