asa user context does not pass user traffic

which two verification steps should be performed if a user context does not pass user traffic?