(i) is used to debug only issues related to dropping of traffic, however (ii) can be used for any firewall issue including NATing, clustering etc.

(i) is used to debug the access control policy only, however (ii) can be used to debug a unified policy

(i) is used on a Security Gateway, whereas (ii) is used on a Security Management Server

(i) is used for general debugging, has a small buffer and is a quick way to set kernel debug flags to getan output via command line whereas (ii) is useful when there is a need for detailed debugging and requires additional steps to set the buffer and get an output via command line

tail -f $FWDIR/log/fw.log |grep drop in expert mode

cat /dev/fw1/log in expert mode

fw ctl zdebug + drop in expert mode

Smartlog

$FWDIR/scripts/core-dump-enable.sh

# set core-dump enable

# save config

> set core-dump enable

> save config

service core-dump start