Outbound Firewall Cleanup Rule

[RobertTaylor]

I'm trying to implement a "Outbound - Cleanup" rule as shown that logs blocked traffic.

The purpose of this is two part:

1. Block Any Undefined Traffic
2. Log Blocked Traffic in case additional exceptions are required (logging wouldn't always need to be enabled, just sometimes when troubleshooting a policy)

The issue that I'm having is that after applying this policy HTTP traffic is being blocked by the Cleanup rule even though it is added as a service on Rule #3.

Is this how its supposed to work?

Am I missing something, or is this a bug?

[PhoneBoy]

Are you managing via Infinity Portal or on-prem (and if so, what version/JHF level)?
What client version(s) is/are involved?

[RobertTaylor]

This is an Infinity Portal service (EPMaaS).

The installed version is the current recommended version 88.32.

[PhoneBoy]

Recommend engaging the TAC here: https://help.checkpoint.com 

[the_rock]

You mean rule 2?

Andy

[RobertTaylor]

Sorry your correct, yes I meant rule #2 

[the_rock]

I dont know if fw up execute command works on smb, but you can try. Just google fw up execute check point and it will give right syntax.

Andy

[RobertTaylor]

Is that for endpoint or gw?

[the_rock]

gateway

[RobertTaylor]

ok
I'm having this issue on the endpoint, thanks for the help though

[the_rock]

I know you are, but fw is dropping it on wrong rule, so to me, seems like fw problem, NOT endpoint

[PhoneBoy]

Endpoint has its own firewall that operates a bit differently from our Quantum (Spark) appliances 🙂

[the_rock]

K, fair enough, tells u how much I know about endpoint side lol

Andy