> Source: [sk182072](https://support.checkpoint.com/results/sk/sk182072)

# sk182072 - Traffic dropped with "Clear text packet should be encrypted" when VPN Routing is set "To the center or through the center to other satellites, to the internet, and other VPN targets"

| Property | Value |
|----------|-------|
| Solution ID | sk182072 |
| Date Created | 2024-03-07 |
| Last Modified | 2024-04-29 |
| Technical Level | Advanced |
| OS | Gaia |

## Symptoms

- * In the Star community, VPN routing is configured to direct traffic **To the center or through the center to other satellites, to the internet, and other VPN targets**.
* In **Logs and Monitoring** or with the `fw ctl zdebug` and the drop command, you may observe the drop error `Clear test packet should be encrypted` for traffic on the satellite gateway that originates neither from the central gateway nor from the satellite gateway's own encryption domain.

## Cause

When you configure VPN routing **To the center or through the center to other satellites, to the internet, and other VPN targets** , the satellite gateway considers any traffic from any address which is not included in our encryption domain as "*Other GW encdom* ", **so this drop is expected**.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content