Good Day Everyone!
We have a checkpoint gateway running R77, which has a VPN with a Cisco ASA, everything was fine until we started having latency issues.
After troubleshooting, we saw the SOME of traffic/connections which were supposed to "encrypt" was being "accept", .i.e. being accepted and getting dropped when it reaches the ISP because of private destination IP(which is part of the remote peer encryption domain).
Taking a look at the historic logs showed us that this "accept" behaviour is seen from a long time and hasn't caused any issues until today.
Taking a look at the rule, we saw that the VPN column was set to "Any Traffic" and not to the specific VPN community.
We are thinking of adding the specific community to the VPN column to fix this(not 100% sure if this is going to work).
Could there be any other reason why this could be happening ?