> Source: [sk39156](https://support.checkpoint.com/results/sk/sk39156)

# sk39156 - fwd process consumes 100% CPU 

| Property | Value |
|----------|-------|
| Solution ID | sk39156 |
| Date Created | 2009-04-14 |
| Last Modified | 2017-10-05 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * "kernel: FW-1: fwldbcast_flush: active connections is currently enabled and due to high load it is making sync too slow to function properly. 1 active updates were dropped." message on the console.
* The fwd process consumes 100% CPU.

## Cause

This can be caused by Active Connections feature that alows to view the content of Connections Table of all connections handled by a Security Gateway in SmartView Tracker. The view is "live" (or active), revealing constant refreshes of the view according to the changes in the connections table.

## Solution

It is recommended to disable this feature for systems handling high numbers of concurrent short connections (more than 200 connections each lasting less then few seconds), because:

* The feature puts enormous load on the Gateway and Log server.
* The feature consumes significant bandwidth and competes with normal Gateway logs on network resources.

<br />

**Procedure:**

1. Modify the value of attribute "enable_active_conn_view" on the SmartCenter Server. This can be done using the GUIDBedit tool.   
   1. Log into the Database tool and select table "Global Properties \> properties."

   2. Select the object name "`firewall_properties`" and search the field name "`enable_active_conn_view`".

   3. Change the `enable_active_conn_view` attribute value from *true* to *false*.

   4. Click "File \> Save all" from the Database tool's option toolbar, and close the GUI.

2. Close any running SmartView Tracker processes and restart the SmartCenter Server by running `cpstop` and `cpstart` from the command line.

3. Restart the Gateway by running cpstop and cpstart from the command line.

<br />

<br />

If there is a remote log server, apply the steps below to disable Active Logging:

1. Modify the value of attribute "enable_active_conn_view" on the SmartCenter Server, using the Database tool.  
   1. Log into the Database tool and select table "Global Properties \> properties".
   2. Select the object "`firewall_properties`" and search the field "`enable_active_conn_view`".

   3. Change the `enable_active_conn_view` attribute value from *true* to *false*.

   4. Click "File \> Save all" from the Database tool's option toolbar and close the GUI.

2. Install the database on the Log server.

3. Run `cpstop` and `cpstart` on the Log server to renew its services.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content