SmartDefense - blocking WMI traffic

[ErrolDC]

Hi. We are working witih a vendor who is doing some asset discovery on our network which involves WMI. What we are finding is that SmartDefense is prohbiitings this from occuring. We have a rule that is supposed to allow all communiication from the networks their product is interacting with back to their server and visa versa, but unless we totally move the firewall from the loop, nothing is successful.

We are running:

Checkpoint Software on Dell 2650
Redhat ES3
NGX 62

Can anyone explain why thiis is occuring?

PS: We've also noticed that we have also noticed this issue on notebooks that have the SecureRemote VPN client. Their discovery traffic gets blocked by a rule99.

TIA.

[abusharif]

you sure its 99? dynamic SD rule blocks are normally from 995 and up.