PCNSE · Question #158
Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic?
The correct answer is C. test. The 'test' CLI command is used to simulate traffic traversal in PAN-OS. Specific sub-commands include: 'test security-policy-match' (which Security rule applies), 'test nat-policy-match' (which NAT rule applies), 'test routing fib-lookup' (which route is used), and 'test pbf-poli
Question
Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic?
Options
- Acheck
- Bfind
- Ctest
- Dsim
How the community answered
(28 responses)- B4% (1)
- C89% (25)
- D7% (2)
Explanation
The 'test' CLI command is used to simulate traffic traversal in PAN-OS. Specific sub-commands include: 'test security-policy-match' (which Security rule applies), 'test nat-policy-match' (which NAT rule applies), 'test routing fib-lookup' (which route is used), and 'test pbf-policy-match' (which PBF rule applies). This is a powerful troubleshooting tool that lets administrators verify policy logic without sending live traffic. The other options-'check,' 'find,' and 'sim'-are not valid PAN-OS CLI simulation commands.
Topics
Community Discussion
No community discussion yet for this question.