https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125059#M18064 <P>Hello guys,&nbsp;</P><P>&nbsp;</P><P>I have an issue with my SG, I was looking at my connections and an I found something that I think is that wrong. The webserver has too many connections like 60k, but when I use to cpview I can't see these connections When I receive an external connection on my webserver the traffic is accepted. After 1 hour my webserver tried to connect the external IP with the source port that connection was created. I have the rule to accept (Remote_Desktop_Protocol-Protocol-Signature ), but want to know why I need this rule? Did I create wrong this rule and why take 1 hour to "close" this connection?&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="3.png" style="width: 870px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12803iC845E4702E7EC9AC/image-size/large?v=v2&amp;px=999" role="button" title="3.png" alt="3.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sem título.png" style="width: 764px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12801i23470415CF478ED4/image-size/large?v=v2&amp;px=999" role="button" title="Sem título.png" alt="Sem título.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.png" style="width: 829px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12818iCDEB23A0D39EDB99/image-size/large?v=v2&amp;px=999" role="button" title="2.png" alt="2.png" /></span></P><P>R80.40&nbsp;</P><P>Jumbo Fix :119</P> Wed, 28 Jul 2021 11:29:21 GMT Luisnego 2021-07-28T11:29:21Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125059#M18064 <P>Hello guys,&nbsp;</P><P>&nbsp;</P><P>I have an issue with my SG, I was looking at my connections and an I found something that I think is that wrong. The webserver has too many connections like 60k, but when I use to cpview I can't see these connections When I receive an external connection on my webserver the traffic is accepted. After 1 hour my webserver tried to connect the external IP with the source port that connection was created. I have the rule to accept (Remote_Desktop_Protocol-Protocol-Signature ), but want to know why I need this rule? Did I create wrong this rule and why take 1 hour to "close" this connection?&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="3.png" style="width: 870px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12803iC845E4702E7EC9AC/image-size/large?v=v2&amp;px=999" role="button" title="3.png" alt="3.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sem título.png" style="width: 764px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12801i23470415CF478ED4/image-size/large?v=v2&amp;px=999" role="button" title="Sem título.png" alt="Sem título.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2.png" style="width: 829px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/12818iCDEB23A0D39EDB99/image-size/large?v=v2&amp;px=999" role="button" title="2.png" alt="2.png" /></span></P><P>R80.40&nbsp;</P><P>Jumbo Fix :119</P> Wed, 28 Jul 2021 11:29:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125059#M18064 Luisnego 2021-07-28T11:29:21Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125061#M18065 <P>You’ve attached the same screenshot twice?</P> Wed, 28 Jul 2021 00:24:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125061#M18065 PhoneBoy 2021-07-28T00:24:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125122#M18082 <P>Adjusted.</P> Wed, 28 Jul 2021 11:54:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Security-Gateway-High-Connection/m-p/125122#M18082 Luisnego 2021-07-28T11:54:27Z