Traffic dropped on implied rule 0

[Steve_Payne1]

this week,  we have had several outages, which is affecting our proxy servers and Ad domain DNS servers

the checkpoint is dropping the traffic and reason is "implied rule 0"

I've tried failing over to HA box

tried rebooted

version is R80.30  with HF 140

with

 

our proxy, it would randomly drop traffic from different proxy,

[_Val_]

What does "Description / More" show?

[_Val_]

Look into this SK and let me know if it works for you: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Steve_Payne1]

thanks for the info,  problem i have is that only relates to DNS traffic and my issue is related to DNS/HTTP/HTTPS  etc

here is another log  so you can see all info,   also below is a strange nat issue,  the traffic should be nat'd behind nat rule 20, but is getting nat'd behind nat rule 0

 

 

[_Val_]

@Steve_Payne1 DNS failure will lead to intermittent web traffic issues.

Try the solution and tell me if it helps. If it does not, open a TAC case, but I am pretty confident it will work for you.

[Steve_Payne1]

my inspection setting for that is set to inactive

[nzmatto]

Did you ever get a response / fix for this. I have the same issue with DNS requests being dropped by an implied policy. The article referenced above only relates to items up to R80.20 and I'm on R80.40. Also neither of the options it talks about are active within my IPS. It looks like to change them I'd need to enable them, which does not seem like an optimal way to do things.