-
How do I capture the packets through the GUI on the USG Flex H model?
We can use the Web-GUI to collect packets as a useful debugging method. Navigate to the GUI path Maintenance > Diagnostics > Select the interface and specific filters if needed. In this post, we use host port 514(the default syslog service port) for example. After save the capture setting, navigate to Maintenance >…
-
Why is the VPN tunnel connected, but only TCP traffic can be transmitted?
Question: Why is the VPN tunnel connected, but only TCP traffic can be transmitted? Answer: Please check whether the protocol in Phase 2 is set to "Any." If a specific protocol, such as TCP, is selected, then other protocols will not pass through the tunnel.
-
How to clear the device HA failover count to avoid reaching the maximum failover limit?
Question: How do I clear the device HA failover count to avoid reaching the maximum failover limit? Answer: We can clear the failover count by using the CLI command cmd device-ha failover pause-count clear.
-
How do I check if coredump files have been generated on the firewall?
Question: How do I check if coredump files have been generated on the firewall? Answer: We can check whether the firewall has generated any coredump files by using the CLI command show dir coredump.
-
How to check the system uptime?
Question: How do I know the system uptime? Answer: We can check the system uptime by using the CLI command show system uptime.
-
How to check the firewall dashboard's brief information?
Question: How do I check the firewall dashboard's brief information? Answer: You can check the firewall dashboard's brief information using the following CLI command: show gui dashboard system information
-
How to check the firewall's overall resource usage?
Question: How do I check the firewall's overall resource usage? Answer: You can check the firewall's overall resource usage using the following CLI command: show gui dashboard resource usage
-
How to check if the firewall is connected to the NCC?
Question: How do I check if the firewall is connected to the NCC? Answer: You can check the connection status using the following CLI command: show gui nebula status
-
How to check the organization or site name using the CLI without login Nebula?
Question: How do I find the organization or site name using the CLI without login Nebula? Answer: You can check the organization or site name using the following CLI command: show gui nebula info
-
How to check the last reboot time status?
Question: How do I check the last reboot time status? Answer: You can check the last reboot time using the following CLI command: show gui dashboard boot-status
-
How to check the firewall link speed or its up/down status?
Question: How do I check the firewall link speed or its up/down status? Answer: You can check the link speed and status using the following CLI command: show port status
-
How to query an IP address to find out its category and threat level?
Question: How do I query an IP address to find out its category and threat level? Answer: You can check the category and threat level by using the following CLI command: cmd ip-reputation-query ip x.x.x.x Replace x.x.x.x with the actual IP address. For example: cmd ip-reputation-query ip 8.8.8.8
-
How to query a URL to find out which category it belongs to?
Question: How do I query a URL to find out which category it belongs to? Answer: You can check the category by using the following CLI command: cmd url-category-query search xxxxxx Replace xxxxxx with the actual URL. For example: cmd url-category-query search google.com
-
How to clear the Sandboxing cache for debugging purposes?
Question: How do I clear the Sandboxing cache for debugging purposes? Answer: You can flush the Sandboxing cache using the following CLI command: cmd sandbox-cache-flush
-
How to the clear Anti-Malware cloud query cache for debugging purposes?
Question: How do I clear the Anti-Malware cloud query cache for debugging purposes? Answer: You can flush the cloud query cache using the following CLI command: cmd debug anti-malware cloud-query cache flush
-
How to redial the PPPoE interface using the command line?
Question: How do I redial the PPPoE interface using the command line? Answer: You can run the command cmd dial pppoe ge1_PPP to force a PPPoE redial. Replace ge1_PPP with the actual name of your PPPoE interface.
-
How to flush the content filter without power cycling the firewall?
Question: How do I flush the content filter without power cycling the firewall? Answer: You can flush the firewall's content filter cache using the CLI command cmd content-filter-cache-flush.
-
How to obtain the firewall interface's real-time throughput?
Question: How to obtain the firewall interface's real-time throughput? Answer: First, use the CLI command show interface to identify the interface name. Then, run the command show interface throughput name vlan60 to obtain the real-time throughput. To stop the command, press Ctrl + C.
-
How to flush the DNS cache on a FLEX H firewall?
Question: How do I flush the DNS cache on a FLEX H firewall? Answer: You can flush the firewall's DNS cache by issuing the command: cmd dns proxy clear-cache.
-
How to Troubleshoot When a Remote Access VPN Client Cannot Access an Internal Server?
1. Confirm VPN Tunnel Status Navigate to: VPN Status > IPSec VPN > Remote Access VPN Verify whether the VPN client is listed as connected. Ensure the VPN tunnel is successfully established to the firewall. 2. Check VPN Client IP Assignment Confirm that the VPN virtual NIC has been assigned an IP address by the firewall.…