Verify Access Control Policy Issue

[Jarvis_Lin]

Hi All,

I create 2 rule as below then verify access control policy 

get error.

but when I replace dest to "Internet" Object then verify access control policy 

get succeed

Is this normal behavior?

I running R81.20 Take 24.

[the_rock · Accepted solution]

Definitely 100% normal, it even tells you the reason right there.

Andy

[_Val_]

Not just normal, it is by design 🙂

[the_rock]

Yes sir 🙂

[the_rock]

Just to clarify, though I totally understand why someone might be confused by this...so, when it comes to Check Point, but its pretty much same for any other fw vendor, ANY would refer to anything, internal or external. Internet, on the other hand, ONLY considers external, NOT internal.

Having said that, I would strongly recommend you use separate ordered layer for app control/url filtering. I attached a doc I put together for @Matlu in a separate post.

If you are still not clear, let me know.

Hope it helps.

Cheers,

Andy