> Source: [sk184506](https://support.checkpoint.com/results/sk/sk184506)

# sk184506 - Intermittent delay or failure when loading the login page using Hide NAT

| Property | Value |
|----------|-------|
| Solution ID | sk184506 |
| Date Created | 2026-01-29 |
| Last Modified | 2026-02-17 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Login page loads slowly (up to \~3 seconds) or does not load.

* After login, random authentication failures occur.

* SmartLog does not show drops or errors for the affected traffic.

* The issue does not occur when using Static NAT instead of hide NAT.

* Packet captures show that the SYN?ACK response arrives \~3 seconds after multiple SYN retransmissions.

## Cause

This issue occurs when multiple connections originate from the same source IP address and the same source port, but target different destination IP addresses. In some deployments, intermediate network devices can interpret the second SYN as out?of?state and did not send a SYN?ACK.  
After the Security Gateway allocated a new NAT port, the connection succeeded.  
Static NAT does not reuse the original source IP address, so intermediate devices do not misinterpret the connection state.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content