[elblindo]

Hello chillyjim,

Thanks for your response.
I checked the smartdefense-setting twice, incl. antispoofing, enabled and disabled it on all interfaces, made topology-update with no success at all. I set all smartdefense-filters to "log only", nothing happens other than before.
It seems, that the pakets were not routed. My last post was a little bit wrong that way. If FW1 is down, I can ping its vlan-interfaces ce50005 and ce40005, but not devices in subnets behind these interfaces. Therefor I decided to make a fresh install of Solaris 10. Without installation of FW1 the pakets were routed. Until now there wasn't time to newly setup FW1 on this new Solaris-installation.

If I make further (successful) steps, I will report here.

Regards

elblindo