An administrator must fix a network problem whereby traffic from the inside network to a webserver is not getting through an instance of Cisco Secure Firewall Threat Defense. Which command must the…

Question

Options

• Acapture CAP int INSIDE match ip any host WEBSERVERIP
• Bcapture CAP int OUTSIDE match ip any host WEBSERVERIP
• Ccapture CAP int INSIDE match tcp any 80 host WEBSERVERIP 80
• Dcapture CAP type asp-drop all headers-only

• A
  4% (1)
• B
  12% (3)
• C
  8% (2)
• D
  77% (20)

Explanation

To capture packets that are dropped by Cisco Secure Firewall Threat Defense (FTD) and troubleshoot the issue of traffic from the inside network to a webserver not getting through, the administrator should use the command to capture packets dropped by the accelerated security path (ASP) engine. The correct command is: capture CAP type asp-drop all headers-only This command captures all packets dropped by the ASP engine, which includes packets that are being blocked by access control policies, NAT issues, or other security checks. Access the FTD CLI. Run the command capture CAP type asp-drop all headers-only to capture dropped packets. Analyze the captured data to identify the cause of the drops. This command provides detailed information on why packets are being dropped, helping the administrator resolve the issue.

No community discussion yet for this question.