Which CLI command is used to generate firewall debug messages on a Cisco Firepower?

The correct answer is A. system support firewall-engine-debug. The command 'system support firewall-engine-debug' is used on Cisco Firepower (via the FTD CLI) to generate debug output from the Snort/firewall engine, useful for troubleshooting access control policy decisions. 'system support ssl-debug' is specific to SSL/TLS inspection…

Management and Troubleshooting

Question

Options

Asystem support firewall-engine-debug
Bsystem support ssl-debug
Csystem support platform
Dsystem support dump-table

How the community answered

(32 responses)

A
88% (28)
B
6% (2)
C
3% (1)
D
3% (1)

Explanation

The command 'system support firewall-engine-debug' is used on Cisco Firepower (via the FTD CLI) to generate debug output from the Snort/firewall engine, useful for troubleshooting access control policy decisions. 'system support ssl-debug' is specific to SSL/TLS inspection debugging, 'system support platform' provides platform-level diagnostics, and 'system support dump-table' is used to dump internal data tables-none of which target firewall engine debug messages specifically.

Topics

#Firepower CLI#Debugging#Firewall engine#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice