troubleshoot zone firewalls

[micrinservices]

I am looking for a good source of info on methods to troubleshoot zone based firewalls. My main problem is getting dropped packets logged and knowing what rule is dropping them. Presently only some get logged and fewer still give a reason that I can discern.

Thanks

Greg

[smalkeric]

This may help:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a0080a0eac7.shtml#depios