Debugging the packet processing flow
If you have determined that network traffic is not entering and leaving the FortiWeb appliance as expected, or not flowing through policies and scans as expected, you can debug the packet flow using the CLI.
For example, the following commands enable debug logs and the logs timestamp, and set other parameters for debug logging:
diagnose debug enable
diagnose debug console timestamp enable
diagnose debug application proxy 7
diagnose debug flow show module-process-detail
diagnose debug flow trace start
diagnose debug flow filter server-ip 172.16.1.20
For detailed information on the
diagnose debug commands, see the
FortiWeb CLI Reference.