Command

[anandhubs]

How to find which policy is used for a specific traffic( from a particular source to particular destination.) using cli

[gfleming]

I don't believe there is a way to do this using CLI. You can use grep to filter your config output but that's about it AFAIK

[knagaraju · Accepted solution]

Hello anandhubs,

Below is the command to check policy lookup from cli

diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <device>

For example
diagnose firewall iprope lookup 192.168.1.1 123 8.8.8.8 443 6 port4

Please let me know if you any additional queries.