Check_Point
156-551 · Question #99
What command helps identify the cause of dropped traffic in a Virtual System?
The correct answer is B. fw ctl zdebug drop. fw ctl zdebug drop provides real-time visibility into why packets are being dropped, showing kernel-level decisions and rule evaluations. This is crucial for diagnosing drops due to policy misconfiguration or other inspection layers.
Troubleshooting VSX Environments
Question
What command helps identify the cause of dropped traffic in a Virtual System?
Options
- Adropwatch
- Bfw ctl zdebug drop
- Ctcpdump -nn -i any
- Dfw monitor -p all
How the community answered
(25 responses)- A12% (3)
- B80% (20)
- C4% (1)
- D4% (1)
Explanation
fw ctl zdebug drop provides real-time visibility into why packets are being dropped, showing kernel-level decisions and rule evaluations. This is crucial for diagnosing drops due to policy misconfiguration or other inspection layers.
Topics
#fw ctl zdebug drop#dropped packets#drop reasons#kernel debugging
Community Discussion
No community discussion yet for this question.