Can I perform a policy trace using the CLI?

Solution

Overview

Blue Coat recommends executing a policy trace using the Management Console because the volume of output might be too much for an SSH or a serial console session.

Refer to 000011446 for more details on how to perform policy trace using the Management Console.

However, if you must perform a policy trace via CLI and the traffic, CPU, and memory utilization is low, use the following steps:

 

Enabling global policy trace

ProxySG#policy trace all           <-- remember to disable this after completing the test

ProxySG#show advanced-url /Policy/Delete-All-Traces         <-- this will delete any old policy trace

Reproduce the issue with test browser

ProxySG#show advanced-url /Policy/Trace/default_trace.html   <-- this will show the policy trace entries press enter to show new line or press space key to show the whole page.
 


Tracing limited client IP

Note: The following command will overwrite existing local policy. If you can extract the existing policy via "show configuration" or via local configuration backup, you can append the CPL below to the existing local configuration, and replace the client IP below with the exact IP address of the test client.

To overwrite and wipe your existing local policy with this single policy trace, for newly factory default proxy or proxy without any local policy
ProxySG#(config)inline policy local EOF
<Proxy>
client.address=10.105.13.202 trace.request(yes) trace.rules(all) trace.destination("trace.html")

EOF
  ok
ProxySG#(config)

If you would like to append this CPL with existing local policy
ProxySG#(config)inline policy local EOF
##ADD YOUR EXISTING POLICY ON TOP PORTION HERE##
<Proxy>
client.address=10.105.13.202 trace.request(yes) trace.rules(all) trace.destination("trace.html")

EOF
  ok
ProxySG#(config)

ProxySG#show advanced-url /Policy/Delete-All-Traces         <-- this will delete any old policy trace

Reproduce the issue with test browser

ProxySG#show advanced-url /Policy/Trace/traces.html   <-- this will show the policy trace entries press enter to show new line or press space key to show the whole page.

 


 

 

 

Cause
Resolution
Workaround
Additional Information
Bug Number
InQuira Doc IdFAQ1255
Attachment

Article Feedback

Did this Article solve your issue?
Additional Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat