> Source: [sk111759](https://support.checkpoint.com/results/sk/sk111759)

# sk111759 - UDP Traffic on Locally managed SMB appliances is dropped due to "Violated Unidirectional Connection" 

| Property | Value |
|----------|-------|
| Solution ID | sk111759 |
| Date Created | 2016-06-09 |
| Last Modified | 2022-07-24 |
| Technical Level | Advanced |
| Products | Spark Firewall (Locally Managed) |
| Versions | R81.10.X |
| Platform | 1500, 1600, 1800, 910 |

## Symptoms

- * UDP Traffic on Locally managed SMB appliances is dropped due to "Violated Unidirectional Connection".
* The issue can also happen when using internal NTP server (UDP/123) and get queries from external zone. The Answer from the server is being dropped due to "Violated Unidirectional Connection".

## Cause

The VPN User is trying to authenticate with an internal server on the LAN. The Authentication is sent in UDP. The Check Point appliance does not allow replies to UDP packet (This is by Default).

When a UDP connection reaches the Security Gateway, it marks it in its Connections Table to allow traffic to pass in one direction only. If a UDP connection uses a two way (bi-directional) communication, this would create a violation and the Security Gateway will drop the connection for reason: "Violated Unidirectional Connection".

Also, UDP traffic may be dropped when the source port is reused.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content