The client sends data to the Security Gateway.
The Security Gateway sends a SYN to the server, and waits for the SYN-ACK.
In that time interval, the client will continue sending data to the Security Gateway.
This will trigger CPAS to send another SYN, which on Microsoft servers, might activate a protection for double SYN without RST. This causes the connection to freeze.