Symantec 360R Administration Guide - Page 142

To troubleshoot Symantec Gateway Security 300 Series appliances, Logging/Monitoring

Page 142 highlights

142 Troubleshooting About troubleshooting To troubleshoot Symantec Gateway Security 300 Series appliances ■ See "Logging/Monitoring field descriptions" on page 151. ■ See "Troubleshooting tab field descriptions" on page 156. To set logging levels 1 In the SGMI, in the left pane, click Logging/Monitoring. 2 In the right pane, on the Log Settings tab, under Log Type, check the information to log. Debug information captures a great deal of information. Use this option only during troubleshooting. 3 Click Save. To enable forward WAN packets to LAN 1 In the left pane, click Logging/Monitoring. 2 In the right pane, on the Troubleshooting tab, under Broadcast Debug Level, check Forward WAN packets to LAN. Forwarding packets received on the WAN ports to the LAN for troubleshooting purposes may allow traffic normally denied by the security gateway into your internal network. You should only use this method for capturing WAN packets if you are unable to use a sniffer in the WAN side of your network. Only enable this feature as a last resort, and turn it off immediately once you complete troubleshooting. 3 Click Save. To run a test 1 In the left pane, click Logging/Monitoring. 2 In the right pane, on the Troubleshooting tab, under Testing Tools, in the Target Host text box, type the IP address or DNS name you want to test. 3 In the Tool drop-down list select PING or DNS Lookup. 4 Click Run Tool. The results of the test display under Result. To test default gateway connectivity 1 Verify that your default gateway is reachable by issuing a PING request to its IP address. 2 If you can not PING a host by its IP address you either have an ISP link problem or a routing problem.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218

142
Troubleshooting
About troubleshooting
To troubleshoot Symantec Gateway Security 300 Series appliances
See
“Logging/Monitoring field descriptions”
on page 151.
See
“Troubleshooting tab field descriptions”
on page 156.
To set logging levels
1
In the SGMI, in the left pane, click
Logging/Monitoring
.
2
In the right pane, on the Log Settings tab, under Log Type, check the
information to log.
Debug information captures a great deal of information. Use this option
only during troubleshooting.
3
Click
Save
.
To enable forward WAN packets to LAN
1
In the left pane, click
Logging/Monitoring
.
2
In the right pane, on the Troubleshooting tab, under Broadcast Debug Level,
check
Forward WAN packets to LAN
.
Forwarding packets received on the WAN ports to the LAN for
troubleshooting purposes may allow traffic normally denied by the security
gateway into your internal network. You should only use this method for
capturing WAN packets if you are unable to use a sniffer in the WAN side of
your network. Only enable this feature as a last resort, and turn it off
immediately once you complete troubleshooting.
3
Click
Save
.
To run a test
1
In the left pane, click
Logging/Monitoring
.
2
In the right pane, on the Troubleshooting tab, under Testing Tools, in the
Target Host
text box, type the IP address or DNS name you want to test.
3
In the Tool drop-down list select
PING
or
DNS Lookup
.
4
Click
Run Tool
.
The results of the test display under Result.
To test default gateway connectivity
1
Verify that your default gateway is reachable by issuing a PING request to its
IP address.
2
If you can not PING a host by its IP address you either have an ISP link
problem or a routing problem.