## error Clear text packet should be encrypted
Yesterday we upgraded the mgmt from r80.40 to r81.20
and we have two firewalls still on r80.40
the site to site on the firewalls still up but the icmp/snmp traffic generated from same source ip addresses in the tunnel are being dropped with this error message:
@;3243628120;\[vs\_0\];\[tid\_0\];\[fw4\_0\];fw\_log\_drop\_ex: Packet proto=17 x.x.x.x:56134 -> y.y.y.y:161 dropped by vpn\_drop\_and\_log Reason: Clear text packet should be encrypted;
@;3243632857;\[vs\_0\];\[tid\_0\];\[fw4\_0\];fw\_log\_drop\_ex: Packet proto=1 x.x.x.x:52 ->y.y.y.y:0 dropped by vpn\_drop\_and\_log Reason: Clear text packet should be encrypted;
on the mgmt we edited this file: //opt/CPsuite-R81.20/fw1/lib/crypt.def last lines to:
#ifndef NON\_VPN\_TRAFFIC\_RULES
#ifndef IPV6\_FLAVOR
#define NON\_VPN\_TRAFFIC\_RULES (dst=y.y.y.y or dst=z.z.z.z)
#else
#define NON\_VPN\_TRAFFIC\_RULES 0
#endif
the problem is still occurring
how to fix this ?
please advice
thanks
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208224?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
- [All forum topics](https://community.checkpoint.com/t5/General-Topics/bd-p/general-topics/page/20 "General Topics")
- [Previous Topic](https://community.checkpoint.com/t5/General-Topics/Firewall-behavior-when-handling-terminated-TCP-connections/td-p/266082 "Firewall behavior when handling terminated TCP connections")
- [Next Topic](https://community.checkpoint.com/t5/General-Topics/Checkpoint-Endpoint-VPN-2-VPNs-only-one-works-via-Endpoint-VPN/td-p/266096 "Checkpoint Endpoint VPN - 2 VPNs, only one works (via Endpoint VPN)")
12 Replies
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2024-03-0808:40 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34509)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208226/highlight/true#M34509)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34509/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208226)
Let me see if I can find some stuff about this, it might be known issue if gateways are still on R80.40
Andy
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208226?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2024-03-0808:41 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34510)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208227/highlight/true#M34510)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34510/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208227)
K, found it...MAKE SURE to backup the files first, of course
\# cd $FWDIR/conf
\# cp user.def.FW1 user.def.R8040CMP
Thats it. Then push the policy.
Andy
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208227?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[bezeq\_int](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1695)
Participant
2024-03-0809:07 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34511)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208228/highlight/true#M34511)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34511/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208228)
[In response to the\_rock](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208227/highlight/true#M34510)
No sir, that also did not fix the issue
\[Expert@CP-MGMT:0\]# cd $FWDIR/conf
\[Expert@CP-MGMT:0\]# pwd
/opt/CPsuite-R81.20/fw1/conf
\[Expert@CP-MGMT:0\]# ll \| grep user.def
...
-rwxrwx--- 1 admin bin 882 Mar 7 20:44 user.def.FW1
...
-rw-r----- 1 admin bin 732 Nov 16 2022 user.def.R8040CMP
...
\[Expert@CP-MGMT:0\]#
\[Expert@CP-MGMT:0\]# cp user.def.FW1 user.def.R8040CMP
\[Expert@CP-MGMT:0\]#
\[Expert@CP-MGMT:0\]# ll \| grep user.def.FW
-rwxrwx--- 1 admin bin 882 Mar 7 20:44 user.def.FW1
\[Expert@CP-MGMT:0\]# ll \| grep user.def.R
....
-rw-r----- 1 admin bin 882 Mar 8 18:56 user.def.R8040CMP
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208228?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2024-03-0809:28 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34512)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208229/highlight/true#M34512)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34512/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208229)
[In response to bezeq\_int](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208228/highlight/true#M34511)
Did you install the policy?
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208229?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[bezeq\_int](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1695)
Participant
2024-03-0809:35 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34513)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208230/highlight/true#M34513)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34513/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208230)
[In response to the\_rock](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208229/highlight/true#M34512)
sure i did 🙂
[1\\
\\
\\
Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/general-topics/message-id/34513/tab/all-users "Click here to see who gave kudos to this post.")
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208230?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2024-03-0810:07 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34514)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208232/highlight/true#M34514)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34514/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208232)
[In response to bezeq\_int](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208230/highlight/true#M34513)
K, fair enough. If thats the case, I dont want to tell you to modify anything else with that file, as Im worried we may make it worse and no one wants that on the weekend lol
Anyway...maybe reverse all the changes and lets take a step back here. So, IF its saying clear packet should be encrypted, logically, that insinuates to me that something is missing in the enc. domain possibly...can you check?
Best,
Andy
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208232?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[bezeq\_int](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1695)
Participant
2024-03-0810:39 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=34515)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208235/highlight/true#M34515)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/34515/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/208235)
[In response to the\_rock](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208232/highlight/true#M34514)
thankyou
we'll check with TAC
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/208235?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[\_Jelle](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/14065)
Collaborator
2024-11-1807:25 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=38948)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/233025/highlight/true#M38948)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/38948/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/233025)
[In response to bezeq\_int](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208235/highlight/true#M34515)
Hi bezeq\_int,
So, it's a while ago but any chance you could still share the outcome of your TAC case? Would be great for me but also other people crawling these topics.
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/233025?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[KeonNg](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/80557)
Participant
2025-12-2207:06 PM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=44735)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/265898/highlight/true#M44735)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/44735/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/265898)
[In response to bezeq\_int](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208235/highlight/true#M34515)
Hi [@bezeq\_int](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1695)
Seeking for your update as well the feedback from TAC. Thank you.
What I suspect from here is that whether you need to remove the line:
#define NON\_VPN\_TRAFFIC\_RULES 0
since you have rules define:
#define NON\_VPN\_TRAFFIC\_RULES (dst=y.y.y.y or dst=z.z.z.z)
But im not sure.
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/265898?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2025-12-2307:46 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=44743)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/265926/highlight/true#M44743)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/44743/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/265926)
[In response to KeonNg](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/265898/highlight/true#M44735)
See if this explanation by [@Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) helps. I know maybe not exact same scenarion, but it is relevant.
[https://community.checkpoint.com/t5/Security-Gateways/Unnumbered-VTI-to-3rd-party-gateway/m-p/137471...](https://community.checkpoint.com/t5/Security-Gateways/Unnumbered-VTI-to-3rd-party-gateway/m-p/137471#M29245)
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/265926?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[the\_rock](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213)
MVP Diamond
2026-01-0106:44 PM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=44798)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/266327/highlight/true#M44798)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/44798/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/266327)
[In response to bezeq\_int](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/208235/highlight/true#M34515)
Hey mate,
Happy new year!
Any progress with this?
Best,
Andy
"Have a great day and if its not, change it"
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/266327?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871)
MVP Gold
2025-12-2307:19 AM
[Show option menu](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224# "Show option menu")
- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=general-topics&message.id=44742)
- [Permalink](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/m-p/265921/highlight/true#M44742)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/general-topics/message-id/44742/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/265921)
This message means the source is in a peer's encryption domain and the destination is in the local encryption domain. The firewall is saying it should have received this traffic over a VPN with that peer.
Think of it like antispoofing for VPNs.
"According to the policy, the packet should not have been decrypted" is similar, but the other way around: the local system decrypted the packet, but the source isn't in that peer's encryption domain or the destination isn't in the local encryption domain.
0
Kudos
[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/265921?t:ac=board-id/general-topics/thread-id/34508&t:cp=kudos/contributions/tapletcontributionspage&ticket=tR3F5QI6eJr-_-1 "Click here to give kudos to this post.")
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
[Reply](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
Post Reply
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
| --- | --- |
|
[israelfds95](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/93117) | 13 |
|
[HeikoAnkenbrand](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/21670) | 7 |
|
[simonemantovani](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/79070) | 5 |
|
[emmap](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/71054) | 3 |
|
[Steffen\_Appel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10477) | 2 |
|
[Kaspars\_Zibarts](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11456) | 1 |
|
[Alex-](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10384) | 1 |
|
[Danny](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/687) | 1 |
|
[Bob\_Zimmerman](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/27871) | 1 |
|
[DH](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/25118) | 1 |
[View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/general-topics/timerange/one_month/page/1/tab/authors)
Trending Discussions
[Five Habits That Improved My Check Point Deployments](https://community.checkpoint.com/t5/General-Topics/Five-Habits-That-Improved-My-Check-Point-Deployments/td-p/279760)
[Automatically Renew VPN Certificates](https://community.checkpoint.com/t5/General-Topics/Automatically-Renew-VPN-Certificates/td-p/279072)
[Snapshot and /boot disk space full](https://community.checkpoint.com/t5/General-Topics/Snapshot-and-boot-disk-space-full/td-p/280183)
Upcoming Events
Sort by:
- [All](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224#)
- [Virtual](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224#)
- [In-Person](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224#)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Tue 28 Jul 2026 @ 11:00 AM (EDT)
[Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 12:00 PM (SGT)
[The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 02:00 PM (IDT)
[The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 03:00 PM (CEST)
[The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 11:00 AM (EDT)
[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)
Thu 30 Jul 2026 @ 11:30 AM (CDT)
[CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Tue 28 Jul 2026 @ 11:00 AM (EDT)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 12:00 PM (SGT)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 02:00 PM (IDT)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 03:00 PM (CEST)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Wed 29 Jul 2026 @ 11:00 AM (EDT)
[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)
[Virtual](https://community.checkpoint.com/labels/Virtual)
Thu 30 Jul 2026 @ 10:00 AM (PDT)
[AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Tue 11 Aug 2026 @ 11:30 AM (EDT)
[New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Thu 13 Aug 2026 @ 11:30 AM (EDT)
[Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Thu 20 Aug 2026 @ 08:30 AM (COT)
[Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Thu 20 Aug 2026 @ 06:00 PM (COT)
[Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Thu 27 Aug 2026 @ 09:00 AM (CEST)
[Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914)
[In-Person](https://community.checkpoint.com/labels/In-Person)
Wed 21 Oct 2026 @ 09:00 AM (BST)
[AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505)
[CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events)
[Top](https://community.checkpoint.com/t5/General-Topics/error-Clear-text-packet-should-be-encrypted/td-p/208224)
About CheckMates
- [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage)
- [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage)
Learn Check Point
- [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0)
- [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia)
- [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix)
Advanced Learning
- [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm)
- [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge)
- [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=)
- [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification)
Resources
- [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox)
- [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub)
- [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog)
- [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live)
Non-English Discussions
- [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish)
- [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais)
- [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese)
- [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese)
- [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian)
- [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan)
YOU DESERVE THE BEST SECURITY
We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/)
©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/)
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.