topic Re: debug flow basic for packet drop due to threat? in General Topics

debug flow basic for packet drop due to threat?

ghostrider — Sun, 15 May 2016 19:50:59 GMT

Hello

debug flow basic commands is helpful for troubleshooting issues related to nat, route, policy? or also due to threats like drop due to IPS, AV etc?

Re: debug flow basic for packet drop due to threat?

reaper — Tue, 17 May 2016 08:33:12 GMT

Hi @ghostrider

'flow basic' is the log feature specific to the network layer, so it will tell you about ingress, egress, nat, etc.

if you would like details about other aspects, you can enable different features:

> debug dataplane packet-diag set log feature ctd 
 all all 
 basic basic 
 detector detector 
 dns dns 
 error error 
 sml sml 
 url url 
 urlcat urlcat

ctd will give you more details regarding the ContentID (threat/vuln/..) process. If you require other details you can also enable 'appid basic' for AppID details or 'proxy basic' for ssl decryption details.

please be aware these are debugging tools and should be used cautiously

Re: debug flow basic for packet drop due to threat?

MP18 — Fri, 28 Apr 2023 18:58:32 GMT

for SSL decryption then we can use the proxy and both ssl for flow basic