Checkpoint Firewall-1 Authentication Agent not allowed

I am using Checkpoint Firewall-1 Authentication Agent for accessing our host system. Everytime we need to login our host system, the host login program will trigger this agent (C:\Program Files\CheckPoint\Session Authentication Agent\5.0\fwsession.exe). I have already defined this application (fwsession.exe) as “trusted application”. Under “Network Security Policy” panel, the rule was defined as “Allow all requests”.

However, whenever I open the host application, I can find out there are new blocking entries in firewall log for fwsession.exe.

Why?

Do you have a global rule that allows incoming connections on that port(s)?