SFOS 18.0.3 MR-3 - reject or drop rules stopped working

After upgrading to SFOS 18.0.3 MR-3 our reject or drop rules stopped working for blocking WAN traffic.

I have the following top rule to test which is not working anymore :

Source zone: Any

Source networks and device: WAN_TEST - has my test external IP address

Destination zone: WAN, DMZ2

Destination networks:webdisk_public, DMZ2_webdisk - has the destination IP address 
Action: Reject

 
Parents
  • Sounds like the traffic is not matching this WAN IP anymore. 

    If you look at the packet capture, can you see this traffic going out? 

    Another question, why should this rule match in the first place? XG is aware of the origin of the traffic. Hence you can also block it from the traffic origin and not on the WAN Port. 

    __________________________________________________________________________________________________________________

Reply
  • Sounds like the traffic is not matching this WAN IP anymore. 

    If you look at the packet capture, can you see this traffic going out? 

    Another question, why should this rule match in the first place? XG is aware of the origin of the traffic. Hence you can also block it from the traffic origin and not on the WAN Port. 

    __________________________________________________________________________________________________________________

Children