> Source: [sk184097](https://support.checkpoint.com/results/sk/sk184097)

# sk184097 - The Security Gateway does not block certain websites when HTTP/2 connection coalescing is used

| Property | Value |
|----------|-------|
| Solution ID | sk184097 |
| Date Created | 2026-05-06 |
| Last Modified | 2026-05-07 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * The Security Gateway does not block Google Drive if accessed from another Google service (for example Google Meet) after login.

* Direct access to Google Drive in a new browser tab is blocked as expected.

* Similar behavior may occur with other websites that share the same IPs and TLS certificates.

## Cause

Modern browsers (such as Chrome, Edge and Firefox) use HTTP/2 connection coalescing to improve performance.  

With connection coalescing, the browser can reuse an existing secure connection for multiple hostnames, as long as:

* The hostnames resolve to the same IP address.
* The TLS certificate presented by the server is valid for all hostnames.
For example, when the browser first connects to meet.google.com, it establishes a TLS session with a Google front end server. If the same certificate and IP address also apply drive.google.com, the browser reuses the existing TLS session for the Drive traffic instead of opening a new connection. As a result, the Security Gateway sees only the original SNI (meet.google.com) unless it decrypts the session.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content