https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233242#M45107 <P>It's not an implied rule. See the screenshot in my first post, it says "Policy Name: Standard", and no rule number</P> Wed, 20 Nov 2024 12:51:18 GMT pizzaprophet 2024-11-20T12:51:18Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/232946#M45050 <P>My firewall gets a lot of ICMP requests that are dropped (reason: ICMP redirect packets are not allowed). Is it possible to have them dropped without logging?</P> Sun, 17 Nov 2024 15:11:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/232946#M45050 pizzaprophet 2024-11-17T15:11:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/232995#M45060 <P>Yes you should be able to create an Access Policy rule that does this.<BR />The Track field for this rule should contain “None.”</P> Mon, 18 Nov 2024 13:33:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/232995#M45060 PhoneBoy 2024-11-18T13:33:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233102#M45080 <P>seems like this doesn't work. ICMP rediret packets are dropped (and logged) before my policies are applied?</P> Tue, 19 Nov 2024 12:30:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233102#M45080 pizzaprophet 2024-11-19T12:30:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233164#M45090 <P>What precise rule is it logging on?<BR />If it's Rule 0, check the Implied Rules in Global Properties.</P> <P><BR /><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 954px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/28490iB24765F83F4DEBA2/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P> Tue, 19 Nov 2024 19:00:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233164#M45090 PhoneBoy 2024-11-19T19:00:34Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233242#M45107 <P>It's not an implied rule. See the screenshot in my first post, it says "Policy Name: Standard", and no rule number</P> Wed, 20 Nov 2024 12:51:18 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233242#M45107 pizzaprophet 2024-11-20T12:51:18Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233259#M45109 <P>Yes, see <A href="https://support.checkpoint.com/results/sk/sk112772" target="_blank">https://support.checkpoint.com/results/sk/sk112772</A> for allowing <SPAN class="lia-message-unread lia-message-unread-windows">ICMP redirect packets - then an Access policy as suggested by PhoneBoy will work!<BR /></SPAN></P> Wed, 20 Nov 2024 13:42:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Gaia-81-10-Quantum-6200-Can-I-drop-ICMP-redirect-packets-without/m-p/233259#M45109 G_W_Albrecht 2024-11-20T13:42:58Z