https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58332#M2267 <P>It would be good to look at the log entries - which rule accepts the connection ? Are you in strict mode so only your manually defined rules are valid ?</P> Tue, 16 Jul 2019 08:39:12 GMT G_W_Albrecht 2019-07-16T08:39:12Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58314#M2266 <P>Hi,</P><P>I have created two policies in checkpoint 1470 but it is not working properly as expected.&nbsp;</P><P>The first policy is like -</P><P>source (new IP group)---Destination (server ip-121)-----services(port no.)---Allow.</P><P>and other policy is like</P><P>Source (any) ----Destination (server ip-121) -----service(any)----Block.</P><P>&nbsp;</P><P>After this, I am still able to access the server IP from different IP other then group IP. <span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Allow policy" style="width: 760px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/1887i731D0934FF02C201/image-size/large?v=v2&amp;px=999" role="button" title="policy 1 allow.PNG" alt="Allow policy" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Allow policy</span></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Block policy" style="width: 774px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/1888i08B4A43E5E4B6CAD/image-size/large?v=v2&amp;px=999" role="button" title="policy 13 block.PNG" alt="Block policy" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">Block policy</span></span></P><P>According to the above policy no one access the IP-121 from unknown IP address, but it not happening.</P><P>What could be the issue here ?</P><P>Please help.</P> Tue, 16 Jul 2019 05:24:33 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58314#M2266 Abhinav_Shrivas 2019-07-16T05:24:33Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58332#M2267 <P>It would be good to look at the log entries - which rule accepts the connection ? Are you in strict mode so only your manually defined rules are valid ?</P> Tue, 16 Jul 2019 08:39:12 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58332#M2267 G_W_Albrecht 2019-07-16T08:39:12Z https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58333#M2268 <P>Can we move this to SMB ? This has nothing to do with&nbsp;Endpoint &gt;&nbsp;Endpoint Security Products ...</P> Tue, 16 Jul 2019 11:51:16 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/1470-Policy-not-working-working/m-p/58333#M2268 G_W_Albrecht 2019-07-16T11:51:16Z