Debugging Policy Lookup
Problem
When you have the correct configuration, but some traffic was incorrectly dropped or permitted, you can enable the lookup flag in the security policies traceoptions. The lookup flag logs the lookup related traces in the trace file.
Solution
user@host# set security policies traceoptions <flag
lookup>