> Source: [sk167133](https://support.checkpoint.com/results/sk/sk167133)

# sk167133 - VPN traffic is blocked by Application Control and URL Filtering on SMB Appliances

| Property | Value |
|----------|-------|
| Solution ID | sk167133 |
| Date Created | 2020-05-30 |
| Last Modified | 2020-06-01 |
| Technical Level | General |
| Products | Spark Firewall (Locally Managed) |
| Versions | R82.00.X, R81.10.X |
| Platform | 910 |

## Symptoms

- * Events in the security log show that VPN traffic is being dropped by Application Control.
* "fw ctl zdebug drop" shows that the traffic is being dropped for "`psl_handle_packet: finished REJECT`".

  <br />

## Solution

**The problem was fixed. The fix is included in:**   

* **[R77.20.87 Build 990173004](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153433) (for 700/900/1400)**

**Check Point recommends to always upgrade to the most recent version ([700](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=460) / [900](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=500) / [1400](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=overview&product=490))**   

After you upgrade make sure that the option to inspect VPN traffic with the APPI engine is unchecked. You will find this option in **Device** \> **Advanced Settings** .   

![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1590757051267/appivpn20200529092122.png)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content