Slow web browsing to the Internet and download of files is stuck

Product

Security Gateways

Version

R81.10 (EOS), R81.20, R82

OS

Gaia

Last Modified

2025-06-23

Symptoms

• Slow web browsing to the Internet and the download of files either stall or fail
• The affected connections undergo CPAS (e.g. HTTPS inspected traffic)
• Policy Based Routing (PBR) is configured for the affected connections
• Kernel debug on the Security Gateway (fw ctl zdebug + drop) shows:

fw_log_drop_ex: Packet proto=X XXX dropped by cphwd_send_packet Reason: F2P outbound processing failed (CPAS);

or
fw_first_packet_state_checks: Dropping out of state TCP packet;

Cause

The CPAS routing code uses the wrong interface for routing calculation.

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R81.20 starting from Take 99
• Jumbo Hotfix Accumulator for R81.10 starting from Take 177

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

• Access Level: General
• Status: Approved by TAC
• Date Created: 2025-03-04
• Last Modified: 2025-06-23