I am tried to make a BM38 working with a third party firewall.

IPTrace is working, I even can verify from the third party firewall's

However I have problem with PING.

1. TCP IP filter is disabled.

2. CSAudit log shows: Packet discarded during policy checing, src = BM
public IP, dest = third party firewall public IP.

My BM is with SP1A. So for the third party, I have two rules, one is
allow (at the top), and one is deny (at the middle). The default is at
the bottom.

It seems that some policy is working against me. I tried just use one
third party rule, it seems makeing no differences.

Where can I find the problematic policy or some other related