Firewall dropped IP protocol 97 (Ethernet-within-IP Encapsulation) traffic as unknown.
Create a customer Service Object for IP Type 97 and add this to the desired access rules.
Step 1: Navigate to Network | Service Objects. Step 2: Click on the Add button located at the left bottom on the Services displayed page. Step 3: From the displayed Add service window, enter a meaningful name for this IP type and next to protocol select "Custom IP Type" and enter number 97 in the text box. Step 4: Click ok to save the service object. Step 5:Add the service object created above to the access rule by checking the flow of the traffic and test the connectivity.