> Source: [sk113502](https://support.checkpoint.com/results/sk/sk113502)

# sk113502 - Policy installation and SIC test fail on SMB appliance

| Property | Value |
|----------|-------|
| Solution ID | sk113502 |
| Date Created | 2017-01-29 |
| Last Modified | 2026-02-03 |
| Technical Level | Advanced |
| Products | Security Management Server, Spark Firewall (Locally Managed) |
| Versions | R82.10, R82, R81.20, R82.00.X, R81.10.X |

## Symptoms

- * Policy installation and SIC test fail on SMB appliances.
* "Apply control connections" option is cleared on the Security Management server.
* VPN is enabled on the SMB appliance or on a gateway between the Security Management server and the SMB appliance.

## Cause

CPD (port 18191) and cpd_amon (port 18192) services are enabled by the implied rules. If the "Apply control connections" options is disabled, the services will transferred over VPN and this is not supported.  
Both services should transfer over SIC and not VPN.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content