https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-explicit-traffic-match/m-p/192086#M35468 <P>Have you done any debugging to see how the gateway sees this traffic?<BR />Guessing fw monitor might be the right tool for this...</P> Sat, 09 Sep 2023 01:54:27 GMT PhoneBoy 2023-09-09T01:54:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-explicit-traffic-match/m-p/192056#M35454 <P>Hello.</P> <P>I have an explicit rule for SNMP traffic, through a S2S VPN.</P> <P>The rule is working fine, except for SNMP traffic, because when our manager (Zabbix) sends SNMP requests (UDP/161) to resources on the other side of the VPN, the traffic is MATCHING with a "free" rule that is below our explicit rule.</P> <P>Explicit Rule -&gt; #98 <BR />Src: Local_Network_CP<BR />Dst: Red_Remote_Cisco<BR />Service: SNMP, SSH, HTTP, HTTPS<BR />Action: Accept</P> <P>Free Rule -&gt; #140<BR />Src: Red_Local_CP<BR />Dst: Any<BR />Service: Any<BR />Action: Accept</P> <P>Traffic such as SSH, HTTP, HTTPS, does match our explicit rule, but SNMP does not.</P> <P>Any idea why this might be happening?</P> <P>Regards.</P> Fri, 08 Sep 2023 15:03:54 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-explicit-traffic-match/m-p/192056#M35454 Matlu 2023-09-08T15:03:54Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-explicit-traffic-match/m-p/192086#M35468 <P>Have you done any debugging to see how the gateway sees this traffic?<BR />Guessing fw monitor might be the right tool for this...</P> Sat, 09 Sep 2023 01:54:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/No-explicit-traffic-match/m-p/192086#M35468 PhoneBoy 2023-09-09T01:54:27Z