Ping Response for Trusted Network

[LostBoY]

Hello,

I have a Cluster with R80.40 .. the requirement is to define an internal Network as a trusted NW on eth1 in the Network Management - Topology.

So i ran a continuous ping from Src to Destination and the Src NW is defined as a Trusted Source under Eth1 Topology.

But the issue is after i install the policy i can only see the first packet of ping in the logs while the ping is successfully running on the Source Machine.

When i remove this NW from topology .. all ping packets are seen in logs

How can i see all the ping packets in logs and not just the first packet.

[Maarten_Sjouw · Accepted solution]

You will not see all packets as they are seen as part of 1 session.
When you would see each and every ping packet of a session, your logs would be filling very rapidly.
The reason you see all drops is due to the fact it does not keep information about sessions on dropped packets, so every new ping packet will be seen as a separate, to be examined, packet.

[LostBoY]

So is this expected behavior on Checkpoint ? cause on Cisco i have seen logs for every single packet while running a continuous ping

[Maarten_Sjouw]

Indeed expected behaviour.