Troubleshooting With Security Flow Traceoptions and options
Nov 01
jncie-security security No Comments
Hi,
Many people either have a blind eye to debug approach and some-others might not exactly know the below feature in SRX , but in my Opinion, this has huge advantages. Mainly when your policies are not defined for traffic and you dont see a flow entry in your session table.
Topology
Running Ping from other Router
Now configuring the traceoptions
Analyzing the trace-options
I found this method to be very handy and also used in live environments. How you write your filter is the key criteria to reduce the packet-match condition for the device.
Regards
Rakesh M