If your firewall rules are not doing what you expect them to do, you will need to troubleshoot them, and odds are that it will happen at some point. The obvious first step is to diagnose the problem. For example, nodes on a particular network may not be able to access the internet. Narrowing the scope of the problem is important. If the problem is limited to a certain interface, or certain application/service or protocol, then it will help us in pinpointing the source of the problem.

It is good practice to start by checking the Floating Rules tab. This is because floating rules can take precedence over rules for an individual interface, and if the problem is a floating rule, we can save time that would have been spent checking (and probably double-checking) an interface’s ruleset.

If you are running a proxy setting, you may want to check the settings on...