Debugging Policy Lookup

Problem

When you have the correct configuration, but some traffic was incorrectly dropped or permitted, you can enable the lookup flag in the security policies traceoptions. The lookup flag logs the lookup related traces in the trace file.

Solution

user@host# set security policies traceoptions <flag lookup>