Which is the best command to verify that you have a route to host 1.1.1.5 available on your NetScreendevice?
What is the default action of aNetScreenfirewall when a configured screening function threshold limit has been reached?