> Source: [sk114586](https://support.checkpoint.com/results/sk/sk114586)

# sk114586 - SNX traffic is dropped with "Unauthorized SSL VPN traffic"

| Property | Value |
|----------|-------|
| Solution ID | sk114586 |
| Date Created | 2016-11-28 |
| Last Modified | 2020-10-15 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * SNX traffic is dropped with "Unauthorized SSL VPN traffic":  

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk114586/screenshot11611172312.jpg)

* SSL Network Extender (SNX) users can connect to LAN and ping resources, but pings in the opposite direction (LAN -\> SNX) are not possible.
* SNX users cannot ping other SNX users.

## Cause

"Unauthorized SSL VPN traffic" drop messages means the traffic is dropped on the Mobile Access cleanup rule (no match for the traffic in the Mobile Access Policy)  
By default, Native Applications (*SmartDashboard \>\> Mobile Access* tab) are set to follow "Client to server" direction only.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content