> Source: [sk166498](https://support.checkpoint.com/results/sk/sk166498)

# sk166498 - Cannot access WebUI on allowed subnet

| Property | Value |
|----------|-------|
| Solution ID | sk166498 |
| Date Created | 2020-05-18 |
| Last Modified | 2020-06-02 |
| Technical Level | General |
| Products | Spark Firewall (Locally Managed) |
| Versions | R82.00.X, R81.10.X |
| Platform | 910 |

## Symptoms

- * The user is unable to reach the WebUI of the Gateway.
* fw ctl zdebug drop shows the following: "`dropped by fw_handle_first_packet Reason: WebUI/SSH access attempt from unallowed source;`"
* In **Device** \> **Administrator Access** \> **Specified IP address...**, the source IP address being dropped is included in a subnet range defined in this list.
* Another IP on this list is within the subnet defined.<br />

## Cause

There is an overlapping IP address in the defined subnet.

<br />

## Solution

If you have a single IP defined that is within a subnet that is also defined, the subnet will be ignored.  

![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1587739821355/overlap20200424105943.png)  

You can fix this by removing the single IP. The subnet will then be allowed access.

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content