SANGFOR IAM v2.1 User Manual
248
and the data packets applicable to the policy (to be denied) will be let pass and the related
information will be outputted to a WEB page. Click the <Click here to view packet drop list>
button to open the page and view detailed information of the denied data packets.
This function helps do troubleshooting quickly, locate the configuration mistakes made on certain
function module (of the IAM gateway device) which caused faults such as network disconnection,
etc., and therefore helps the network administrator to quickly correct the configurations.
<Close Drop List>: Click this button to close the Drop list and disable the bypass function.
The Drop List is as shown below:
[Set Conditions] is recommended to be configured. With these conditions, you can filter
some irrelevant information and make troubleshooting more accurate and the process simpler.
After policy troubleshooting, DO remember to close the Drop list, for this function consumes
some system resources; what is more, if the bypass function is not disabled, all the policies
configured are invalid.
