Packet-Based Attack Protection Troubleshooting

Enable Additional Threat Logging:
```
set system setting additional-threat-log on
```
This command enables the firewall to generate Threat logs for various packet-based attacks, including those dropped by Packet-Based Attack Protection mechanisms.
Verify Logging Status:
```
show system state filter cfg.general.additional-threat-log
```
Returns cfg.general.additional-threat-log: True if logging is enabled.
View Zone Protection Statistics:
```
show zone-protection zone <zone-name>
```
Displays statistics for the specified zone, including packet-based attack counters.
Monitor Global Counters:
```
show counter global filter severity drop
```
Shows global counters for dropped packets, useful for identifying packets dropped due to protection profiles.

Monitor Threat Logs:
Navigate to Monitor > Logs > Threat .

Apply the following filter to view packet-based attack protection events:
```
( subtype eq 'packet' )
```
This displays logs where packet-based attack protection mechanisms were triggered.
Review Zone Protection Profile Settings:
Navigate to Network > Network Profiles > Zone Protection .

Select the relevant profile and review the Packet-Based Attack Protection settings to ensure appropriate protections are enabled.

🛡️ Packet-Based Attack Protection Troubleshooting