nerdexam
Palo_Alto_Networks

PSE-PLATFORM · Question #84

A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring

The correct answer is B. From the CLI, issue the show counter global filter packet-filter yes command.. Explanation/Reference: You can check global counters for a specific source and destination IP addresses by setting a packet filter. We recommend that you use the global counter command with a packet filter to get specific traffic outputs. These outputs will help isolate the issue

Firewall Troubleshooting and Diagnostics

Question

A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?

Options

  • AFrom the CLI, issue the show counter global filter pcap yes command.
  • BFrom the CLI, issue the show counter global filter packet-filter yes command.
  • CFrom the GUI, select show global counters under the monitor tab.
  • DFrom the CLI, issue the show counter interface command for the ingress interface.

How the community answered

(57 responses)
  • A
    7% (4)
  • B
    88% (50)
  • C
    2% (1)
  • D
    4% (2)

Explanation

Explanation/Reference: You can check global counters for a specific source and destination IP addresses by setting a packet filter. We recommend that you use the global counter command with a packet filter to get specific traffic outputs. These outputs will help isolate the issue between two peers. Use the following CLI command to show when traffic is passing through the Palo Alto Networks firewall from that source to destination. > show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 20.220 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 6387398 4 info packet pktproc Packets received pkt_recv_zero 370391 0 info packet pktproc Packets received from QoS 0 Etc. https://live.paloaltonetworks.com/t5/Management-Articles/How-to-check-global-counters-for-a-specific-source-and/ta-p/65794

Topics

#CLI#global counters#packet filter#traffic troubleshooting

Community Discussion

No community discussion yet for this question.

Full PSE-PLATFORM Practice