I want to know where to find the allowed traffic drop and to correct it

[sunate_h]

Hi friend,

I already done the security policy, but it seem there are some traffic drop. Where can i find it out for the traffic drop?

Thank you.

[SebRupik · Accepted solution]

Hi there,

Assuming you have configured your deny/drop security policy rules to log traffic, you will see these log entries in the Monitor -> Traffic tab on the webGUI.

cheers,

Seb.

[sunate_h]

Thanks,

And if i want to know is there any packet drop for Traffic that i allow.
Can i see it?

[SebRupik]

If the traffic is being permitted but not received by the client then it could be that the FW marking the flow as 'Threat'.

On the Monitor -> Traffic tab, filter out the flows your are interested in, what entries do you have in the 'Session End' column?

cheers,

Seb.

[laurence64 · Accepted solution]

@SebRupik is completely correct, the session end will tell you what the reason was, look out for session timeout as this can indicate that there was no reply from the destination side, but I would also do a packet capture on the ingress and egress interfaces, this can be found in monitor>packet capture, I would be tempted, in the first instance, to do a capture on the receive on the ingress and a capture on the transmit stage on the egress, that way you will be able to confirm that traffic is leaving the firewall. 

[sunate_h]

Thank you guy.