Examine the output from a debug flow:
```
id=20085 trace_id=1 func=print_pkt_detail line=5363 msg="vd-root received a packet (proto=1, 10.0.1.10:1-10.200.1.254:2048)"
from port3, type=8, code=0, id=1, seq=32."
id=20085 trace_id=1 func=fn_ip_session_common line=5513 msg="allocate a new session:00000340"
id=20085 trace_id=1 func=vf_ip_route_input_common line=2583 msg="find a route: flag=04000000 gw=10.200.1.254 via port1"
id=20085 trace_id=1 func=fw_forward_handler line=586 msg="Denied by forward policy check (policy 0)"
```
Why did the FortiGate drop the packet?

Question

Examine the output from a debug flow:
```
id=20085 trace_id=1 func=print_pkt_detail line=5363 msg="vd-root received a packet (proto=1, 10.0.1.10:1->10.200.1.254:2048)"
from port3, type=8, code=0, id=1, seq=32."
id=20085 trace_id=1 func=fn_ip_session_common line=5513 msg="allocate a new session:00000340"
id=20085 trace_id=1 func=vf_ip_route_input_common line=2583 msg="find a route: flag=04000000 gw=10.200.1.254 via port1"
id=20085 trace_id=1 func=fw_forward_handler line=586 msg="Denied by forward policy check (policy 0)"
```
Why did the FortiGate drop the packet?

Accepted Answer

C. The firewall implicit deny firewall policy.

Answer

A. The next-hop IP address is unreachable.

Answer

B. It failed the RPF check.

Answer

D. The FortiGate did not have a matching explicit firewall policy with the action DENY.

Examine the output from a debug flow: `` id=20085 trace_id=1 func=print_pkt_detail line=5363 msg="vd-root received a packet (proto=1, 10.0.1.10:1->10.200.1.254:2048)" from port3, type=8, code=0…

Question

Options

How the community answered

Community Discussion