300-710 · Question #137
A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device While troubleshooting, a network administrator sees that traffic is reaching…
The correct answer is D. Use packet-tracer to validate that the packet passes through the firewall and is NATed to the. If it is statefull firewall, then ACL can not block the response from server this exesting connection, only wrong NAT rule for this server could be the issue.
Question
A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response. Which step must be taken to resolve this issue without initiating traffic from the client?
Options
- AUse packet-tracer to ensure that traffic is not being blocked by an access list.
- BUse packet capture to ensure that traffic is not being blocked by an access list.
- CUse packet capture to validate that the packet passes through the firewall and is NATed to the
- DUse packet-tracer to validate that the packet passes through the firewall and is NATed to the
How the community answered
(19 responses)- A5% (1)
- B11% (2)
- C5% (1)
- D79% (15)
Explanation
If it is statefull firewall, then ACL can not block the response from server this exesting connection, only wrong NAT rule for this server could be the issue.
Topics
Community Discussion
No community discussion yet for this question.