incoming traffic is seen block on external firewall but in internal firewall there is accept

[Rabindra_Khadka]

Dear Team,

We are facing a issue, we can see the traffic in block on the external firewall but there is a accept log of the same traffic in internal firewall. If the traffic coming from outside is block by external firewall how come the traffic is seen in the internal firewall.

We checked the IP which is also malaicious.

Can someone explain on this.

Thank You

[PhoneBoy]

These are probably seperate connections.
You can confirm this by double-clicking on each of the logs and looking at the source port—it should be different.