> Source: [sk182296](https://support.checkpoint.com/results/sk/sk182296)

# sk182296 - All traffic to Security Gateway drops with error "Reason: Rulebase drop - NO MATCH" after policy installation

| Property | Value |
|----------|-------|
| Solution ID | sk182296 |
| Date Created | 2024-05-16 |
| Last Modified | 2025-12-08 |
| Technical Level | Advanced |
| Products | Security Gateway, Security Management Server |
| Versions | R81.20, R81.10 (EOS), R81.20, R81 (EOS), R81.10 (EOS), R81 (EOS) |

## Symptoms

- * After policy installation, Security Gateway drops all traffic. In the output of `"fw ctl zdebug + drop"` you see similar log:  

  `;fw_log_drop_ex: Packet proto-6 1.1.1.1:10001-> 2.2.2.2:443 dropped by fw_send_log_drop Reason: Rulebase drop - NO MATCH;`

* `fw up_execute` commands show that there are no possible matches aside from the implicit cleanup rule (rule number **16777215**), for example:

  ```
  
  # fw up_execute src=172.16.67.20 dst=10.101.1.240 ipp=17 dport=53
  Rulebase execution ended successfully.
  Overall status:
  Active clob mask: 0
  Required clob mask: 0 Match status: MATCH Match action: Drop
  Per Layer:
  Layer name: <Layer name>
  Layer id: 0
  Match status: MATCH
  Match action: Drop
  Matched rule: 16777215
  Matched rules: 16777215
  ```

* The "Installed on" column in the Access Policy does not have an entry with "Policy Target".  

  **Note**: If you use a multilayered policy, the above can apply to just one of the layers.

## Cause

1) The **Installed on** column of the Access Policy contains a list or a group of Security Gateways that do not contain the Security Gateway you install the policy on.

As a result, an "empty" policy is installed on the Security Gateway, and thus, all traffic matches the implicit cleanup rule.  

2) A second root cause can be the Gateway license has expired.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content