8.4. Troubleshooting IPS

The SRX has a wealth of facilities that you can use to gain lots of information about IPS functionality and the security state of the inspection events for traffic that is passing through the SRX. So, in addition to the security events of the SRX there are also troubleshooting facilities to look at in the IPS policy commit process. In this section, we have broken down troubleshooting into several sections with examples of the commands, their output, and things to look for.

8.4.1. Checking IPS Status

First off, it is important to make sure the SRX is up and running with an active IPS policy and that it is seeing traffic. If you don’t see the information, the SRX is not inspecting traffic.