QuestionQ65

Monitoring and Troubleshooting

You are investigating a communication issue between two hosts. You have opened a session on the SRX Series device nearest to one of the hosts and run the show security flow session command.

What information does this command provide?

Choose two
  • A The total active time of the session.
  • B The end-to-end data path that the packets are taking.
  • C The IP address of the host that initiates the session.
  • D The security policy name that is controlling the session.
Explanation

show security flow session displays each active session’s input and reverse flows, including source and destination IP addresses. It also displays the name and ID of the security policy that the first packet matched and that permitted the traffic. The timeout shown is an idle timeout rather than total session active time, and the output does not provide an end-to-end path across the network.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!