https://community.checkpoint.com/t5/Spark-Firewall-SMB/According-to-the-policy-the-packet-should-not-have-been/m-p/219262#M10963 <P>I have now found the problem:</P> <P>peer name under VTI configuration should be exactly the same!</P> Mon, 01 Jul 2024 12:02:20 GMT Moudar 2024-07-01T12:02:20Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/According-to-the-policy-the-packet-should-not-have-been/m-p/219258#M10961 <P>Hi</P> <P>I am getting "<STRONG>According to the policy the packet should not have been decrypted</STRONG>" when SMB tries to connect central office with destination ospf-all-mcat</P> <P>Both encryption domains on both gateways are <STRONG>empty network groups</STRONG>!</P> <P>OSPF is configured between the two gateways, but all traffic on central office is dropped with that message.</P> Mon, 01 Jul 2024 11:20:36 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/According-to-the-policy-the-packet-should-not-have-been/m-p/219258#M10961 Moudar 2024-07-01T11:20:36Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/According-to-the-policy-the-packet-should-not-have-been/m-p/219262#M10963 <P>I have now found the problem:</P> <P>peer name under VTI configuration should be exactly the same!</P> Mon, 01 Jul 2024 12:02:20 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/According-to-the-policy-the-packet-should-not-have-been/m-p/219262#M10963 Moudar 2024-07-01T12:02:20Z