Firewall Rule "DROP" not working

Question

Good Morning, 
 I create the firewall rules to DROP packets from an interface to LAN interface but the DROP does not working.

Tha LAN_VOIP network doesn't must see the Internal Network and the DMZ network, and the same for the DMZ and Internal Network. 
 
 Why?

Proudmore · Answer

Hi Sir Davide, 
 Good Day 
 Option 1: 
 Put these 2 Firewall rule into TOP 
 Option 2: 
 Do the Web Protection Policy was enabled? 
 Option 3: 
 See logs under Firewall Rule 
 Thank you PS Im also a Newbie

Proudmore · Answer

Hi Sir, 
 Yes if all VOIP, DMZ and LAN network traffic ONLY goes to WAN It is okay to config like this 
 VOIP > ANY > IPV4 
 DMZ > ANY > IPV4 
 LAN > ANY > IPV4 
 then try to delete those drop Policy and make a tests again Hope to solve this problem with this solutions 
 
 Thank you

patrick.hackert@preventgr · Answer

Let me suggest... 
 
 you have some NAT or VPN rules with Automatic Firewall rules enabled? Please have a look into "ALL" Firewall rules (by useing DropDown) and compare all these automatic rules. 
 
 The automatic rules are ALWAYS used before the custom rules! 
 So you can't decline access if it was granted above. ;)