142 Troubleshooting
About troubleshooting
To troubleshoot Symantec Gateway Security 300 Series appliances
See
"Logging/Monitoring field descriptions"
■
See
"Troubleshooting tab field descriptions"
■
To set logging levels
1
In the SGMI, in the left pane, click Logging/Monitoring.
2
In the right pane, on the Log Settings tab, under Log Type, check the
information to log.
Debug information captures a great deal of information. Use this option
only during troubleshooting.
3
Click Save.
To enable forward WAN packets to LAN
1
In the left pane, click Logging/Monitoring.
2
In the right pane, on the Troubleshooting tab, under Broadcast Debug Level,
check Forward WAN packets to LAN.
Forwarding packets received on the WAN ports to the LAN for
troubleshooting purposes may allow traffic normally denied by the security
gateway into your internal network. You should only use this method for
capturing WAN packets if you are unable to use a sniffer in the WAN side of
your network. Only enable this feature as a last resort, and turn it off
immediately once you complete troubleshooting.
3
Click Save.
To run a test
1
In the left pane, click Logging/Monitoring.
2
In the right pane, on the Troubleshooting tab, under Testing Tools, in the
Target Host text box, type the IP address or DNS name you want to test.
3
In the Tool drop-down list select PING or DNS Lookup.
4
Click Run Tool.
The results of the test display under Result.
To test default gateway connectivity
1
Verify that your default gateway is reachable by issuing a PING request to its
IP address.
2
If you can not PING a host by its IP address you either have an ISP link
problem or a routing problem.
on page 151.
on page 156.