Early Drop: blocking the connection before final rule match.

Adrian2 — Fri, 22 Jul 2022 16:27:11 GMT

Good afternoon, could you please help me, in a newly created rule I see there is no traffic that reaches the application layer, seeing the Log the traffic stays in security with the following message.

How would I go about solving this?
Check Point 15400 81.10.

Thanks.

Re: Early Drop: blocking the connection before final rule match.

PhoneBoy — Fri, 22 Jul 2022 16:37:36 GMT

It sounds like you’re using ordered layers when this may not even be necessary.
Only reason these days you have to is you’re centrally managing an R77.x gateway.
Early Drop is explained here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111643&partition=Advanced&product=Quantum

More details about your rulebase configuration and the connection in question might help.

topic Early Drop: blocking the connection before final rule match. in Firewall and Security Management

Early Drop: blocking the connection before final rule match.

Re: Early Drop: blocking the connection before final rule match.