Gateway IPS, AV, AB, Contract updating directly while proxy configured

[Emil_T]

I have proxy configured in gateway's object (HA) Under Topology > Proxy > Use custom proxy.

I can see in traffic logs that most of the traffic coming form gateway indeed goes to the proxy.

But some traffic is still going directly. I see logs to dl3.checkpoint.com and to updates.checkpoint.com.

Why is this happening?

[the_rock]

Are you able to send screenshot of the rule?

Andy

[Emil_T]

Updated in the original post

[the_rock]

Screenshot of the RULE, not the log.

[Emil_T]

.

[the_rock]

Sorry, see it now, not sure why I could not before 🙂

Just wondering, is that layer with fw and urlf/appc enabled?

[Emil_T]

correct. The log in the screenshot is application layer

[the_rock]

Not sure, maybe its by default, TAC can confirm.

[PhoneBoy]

Possibly a bug.
Suggest involving TAC: https://help.checkpoint.com