Fraud-protection matched but the call is established

Hello, colleagues.

Could somebody help me with an advice? I have very simple problem:

• I configured fraud-protection element in accordance with the configuration guide
• uploaded .xml file with the numbers to be blocked
• and refreshed fped with notify command.

Now if I make a call to the number which is in the blocked list, then SBC accepts my INVITE despite fped finds TO-PHONE criterion match. If it is written in the log "dropCall=1", then why SBC allows session establishing? I wonder if something else except "conf t-> system -> fraud-protection" must be configured to force SBC to drop the calls in such cases.