> Source: [sk41698](https://support.checkpoint.com/results/sk/sk41698)

# sk41698 - Cannot connect with Client Authentication due to kernel table limit

| Property | Value |
|----------|-------|
| Solution ID | sk41698 |
| Date Created | 2009-04-22 |
| Last Modified | 2012-11-13 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Cause

The client_auth table is reaching it's limit of 25000 records.

## Solution

1. Perform cpstop on Security Management Server  
2. Backup the existing $FWDIR/lib/table.def file  
3. Edit the $FWDIR/lib/table.def file as below   

client_auth = dynamic sync expires AUTH_TIMEOUT kbuf 3 \\   
expcall KFUNC_CLIENT_AUTH_EXPIRE;   

Add the value of   

limit 50000   

After the kbuf 3 value. So after the change, it looks like   
client_auth = dynamic sync expires AUTH_TIMEOUT limit 50000 kbuf 3 \\  
expcall KFUNC_CLIENT_AUTH_EXPIRE keep;

4. Save the file and close it.   
5. Run cpstart on the Security Management Server.   
6. Install the policy.   
7. Test of enforcement module by running command fw tab -t client_auth \|grep limit to see if value is increased.

For management servers running R70 or greater and managing gateways of earlier NGX versions, the table.def file to be edited will be located in a directory other than $FWDIR/lib. The file locations are listed below:

SG80 Gateways  
/opt/CPSG80CMP-R71/lib/table.def  

Connectra R66  
/opt/CPCON66CMP-R71/lib/table.def  

Connectra R62  
/opt/CPCON62CMP-R71/lib/table.def  

Edge Appliances  
/opt/CPEdgecmp-R71/libsw/table.def  
/opt/CPEdgecmp-R71/lib/table.def  

VSX (R65/R67/R68)  
/opt/CPV40Cmp-R71/lib/table.def  

NGX R60-R65  
/opt/CPNGXCMP-R71/lib/table.def

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content