> Source: [sk92829](https://support.checkpoint.com/results/sk/sk92829)

# sk92829 - Traffic is dropped on Security Gateway running IPSO 6.2 MR4 / MR4a when SecureXL is enabled

| Property | Value |
|----------|-------|
| Solution ID | sk92829 |
| Date Created | 2013-05-13 |
| Last Modified | 2021-02-12 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * SmartView Tracker logs show that traffic is dropped by the Clean Up rule.

* Disabling SecureXL with "`fwaccel off`" command immediately resolves the issue.

* Counter '`ipsctl net:sxl:stats:add_fails`' increases when SecureXL is enabled.

* Number of concurrent connections in Connections Table increases until it reaches the limit.

* Any customer upgrading to IPSO 6.2 MR4 / MR4a will experience this problem if SecureXL is enabled.

* Packet loss can be observed across the Security Gateway via FW Monitor when the issue is occurring (this is not the same as interface drops).

## Cause

Table leak in SecureXL.

## Solution

This problem was fixed. The fix is included in:

* [IPSO 6.2 MR5 (Build GA100)](https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=44605)

Check Point recommends to always upgrade to the most recent version ([upgrade IPSO OS](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=77) / [upgrade Security Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=73) / [upgrade Cluster](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=428) / [upgrade VSX](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=359) / [upgrade Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=184) / [upgrade Multi-Domain Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=166) / [upgrade SmartConsole](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=downloads&product=191)).

If you do not wish to install the improved IPSO image, the following **workarounds** are:

* Disable SecureXL with "*fwaccel off* " command (reboot is not required)  

* Downgrade to IPSO 6.2 MR3  

* Install IPSO 6.2 GA builds 077 / 078 / 079, which do not contain the problematic code

Related solution: - [sk160333: Traffic drop on R80.20 Security Gateway when SecureXL is enabled](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk160333)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content