this is a little   dumb  but is important verify the state less  if this check fail we could have conn track enable in a production firewall and it can reduce the efficiency in more than i will change it as you asked 