Usage Guide

If the FW or network is faulty, you must collect information as soon as possible. The accuracy and integrity of collected fault information determines whether the fault can be rapidly located.

The FW provides the Diagnosis Info function, allowing you to collect the module running status and configuration through one-click. If the FW is faulty, you can collect information and send it to technical support personnel for fault location.

If the FW or network is faulty and the fault type is uncertain, you can use the following methods to locate the fault:

• IPSec Diagnosis: Use IPSec diagnosis to locate and rectify faults when IPSec services are interrupted.
• Packet Tracing: With this function, you can query the key path information of packets.
• Ping: the most common debugging tool for testing IP connectivity.
• Tracert: traces the gateways along the path from the host that sends the data to the destination.
• Port Mirroring: To locate network problems by capturing and analyzing session packets without interrupting services, you should configure port mirroring.
• 5-Tuple Packet Capture: If the FW or service is faulty and the fault cannot be located after you check the configuration and statistics, you can enable 5-tuple packet capture for the FW to capture packets of the specified flow for fault analysis.
• Collecting 5-Tuple Packet Discarding Statistics: 5-Tuple packet discarding statistics refer to the packet statistics of the data flows matching specific conditions based on the configured 5-tuple. This function is used to check whether the FW forwards packets properly if faults occur. If the FW discards packets, you can locate and rectify the faults using other troubleshooting methods.

If the FW or network is faulty, you can first determine the fault type and use the following methods to locate the cause:

Web Page Diagnosis: This function is used to rapidly locate and rectify the fault that occurs when an intranet user accesses a web page.