Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Identifying a firewall rule

Hi,

Is there any command/method to identify what rule/rule no. a permitted traffic is being allowed through?

I can see counts & sessions built but wanted to know if there is any way to know the session belongs to which ACE?

Also, one of my sessions(which is permitted on the firewall) gives flag "sAa", what does this mean. I can get a reponse from the destination port.

Thanks.

1 REPLY

Re: Identifying a firewall rule

You can use the 'packet-tracer' command. It is available both in the CLI and GUI.

Regards

Farrukh

97
Views
0
Helpful
1
Replies