> Source: [sk185037](https://support.checkpoint.com/results/sk/sk185037)

# sk185037 - SCTP Traffic Not Logged Correctly When Using "Any" Service on Quantum Spark Appliances

| Property | Value |
|----------|-------|
| Solution ID | sk185037 |
| Date Created | 2026-06-08 |
| Last Modified | 2026-06-24 |
| Technical Level | General |
| Products | Spark Firewall (Locally Managed) |
| Versions | R81.10.X |
| Platform | 1500 |

## Symptoms

- When a rule allows SCTP traffic using "Any" or a non-SCTP service object:

* SCTP connections may remain in the connection table (active session table on the Gateway) after an SCTP SHUTDOWN or ABORT.
* New SCTP sessions between the same source and destination may not generate log entries in SmartLog until the idle timeout expires.

## Cause

The Security Gateway applies SCTP-specific state tracking and session termination logic only when traffic matches an SCTP Service object.

If a rule permits SCTP traffic using Any or another generic service object, the Gateway does not apply SCTP-specific handling. As a result, session termination and logging behavior are incomplete.

## Solution

**Step 1- [](https://www.checkpoint.com/support-services/contact-support/)Upgrade to the Build in which the issue was resolved:**

* [Jumbo Hotfix for R81.10.17](https://support.checkpoint.com/results/sk/sk179615) Build 996004878
* [Jumbo Hotfix for R82.00.10](https://support.checkpoint.com/results/sk/sk183406) Build 998002182

**Step 2 - Create an SCTP Service Object**

1. Open the Quantum Spark WebUI.
2. Go to **Users and Objects** \> **Network Resources** \>**Services**.
3. Configure the object:
   * **Name:** SCTP_\<PORT\> (for example, SCTP_9000)
   * **Type:** SCTP
   * **Protocol Type:** None
   * **Ports:** (for example, 9000)
4. Click **Save**.

**Step 3 - Update the Access Rule**

1. Go to **Access Policy** \>**Firewall** \>**Policy**.
2. Edit the rule that allows the SCTP application.
3. Replace **Any** (or other generic service objects) with the SCTP Service object you created.
4. Click **Save**.
5. Install the policy on the Gateway.

**Step 4 - Verification**

1. Initiate a new SCTP session.
2. Ensure log entries appear in SmartLog.
3. Verify that terminated sessions are removed from the connection table.  
   Example: fw ctl conntab \| grep \<IP address\>

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content