How would you confirm if the traffic is actually being dropped by the gateway?

You are attempting to establish an FTP session between your computer and a remote
server, but it is not being completed successfully. You think the issue may be due to IPS.
Viewing SmartView Tracker shows no drops. How would you confirm if the traffic is actually
being dropped by the gateway?

You are attempting to establish an FTP session between your computer and a remote
server, but it is not being completed successfully. You think the issue may be due to IPS.
Viewing SmartView Tracker shows no drops. How would you confirm if the traffic is actually
being dropped by the gateway?

A.
Search the connections table for that connection.

B.
Run a fw monitor packet capture on the gateway.

C.
Look in SmartView Monitor for that connection to see why it’s being dropped.

D.
Run fw ctl zdebug drop on the gateway.



Leave a Reply 1

Your email address will not be published. Required fields are marked *


CNUG

CNUG

It is D

fw ctl zdebug drop

lists all dropped packets in realtime gives an explanation why the packet is dropped
#fw ctl zdebug drop | grep x.x.x.x