> Source: [sk39370](https://support.checkpoint.com/results/sk/sk39370)

# sk39370 - What are VPN rules and VPN Community Rules?

| Property | Value |
|----------|-------|
| Solution ID | sk39370 |
| Date Created | 2009-04-14 |
| Last Modified | 2020-05-26 |
| Technical Level | General |

## Solution

VPN Rules are described as:

"The automatic rule only symbolizes the presence of the concept of communities in the rule base. There is no traffic matching only for this rule because every connection needs to match another rule in the rule base and to be logged, if necessary. The decision to encrypt a connection is automatic, thus encrypted connections (authorized by the VPN-1) will be logged (as encrypted) by the matching Accept rule."

They appear so that the administrator can see in a logical format what they have defined in the VPN community.

The only way to disable these rules is to delete the VPN community.

VPN community rules are created when you select "Accept all encrypted traffic" on the General tab of the VPN community. The rule is added in the security policy but does not fall into the category of explicit or implied rule, but is an automatic community rule.

This rule will encrypt all traffic between gateways managed by the same management server only. If the "Accept all encrypted traffic" is enabled, the gateway will accept the traffic **if** the gateway is not the destination.

To delete this rule, the option will need to be deselected from the "General" tab of the VPN community.   

In r80.XX and above, this option can be deselected from the "Encrypted Traffic" tab of the VPN community.  

![r80 vs r77](https://sc1.checkpoint.com/sc/SolutionsStatics/sk39370/r7720200525131911.png)  

To have more granular control over these rules the use of Traditional Mode VPN policies would have to be applied.

For more information about VPN Domains and Encryption Rules, see the Traditional Mode VPNs section in the [VPN R77 Versions Administration Guide](https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content