Sometimes Technical Support needs to trace one or more rules to see exactly what rules a request is going through. For example, you might use rule engine tracing if you are trying to determine which rule is blocking google.com. The rule engine tracing would tell you exactly which rule did the blocking. In this case, Technical Support might ask for tracing to be enabled.
Use the following steps to enable tracing.
NOTE: For rule tracing to work properly, you need to follow a specific client IP address of someone who will be testing this.
- Delete any existing rule engine traces. Browse to Troubleshooting, Rule tracing and delete any existing files.
- Create a new Top Level Rule Set:
- Browse to Policy, Rule Sets tab.
- Create a new Top level Rule Set by clicking the Add button on the left and then selecting Top Level Rule Set.
- At the Add New Top Level Rule Set screen, select Add new rule set. Give it a name, such as Rule Engine Tracing.
- Click OK.
- Create a rule within the newly created rule set.
- Click the Add Rule button on the right. Assign a name to the rule, such as Enable rule tracing.
- Browse to Rule Criteria and click Add to add new rule criteria.
- Type the following information in each section:
Property: Client.IP
Operator: matches
Value: client IP address (Example: 10.10.99.1)
- Select Events, click Add, and select Event from the menu.
- From the list, select Enable RuleEngine Tracing and click OK.
- At the next screen, click Finish.
- Save the changes.
- Replicate the issue from the same client IP address specified above. It should generate some rule engine traces after the issue has been replicated.
IMPORTANT: When you are done replicating the issue, ensure that you disable the rule engine tracing rule set; if you do not disable it, it can fill up your disk by generating rule engine trace files.
- Download the rule engine trace files and send them to Technical Support: Select Troubleshooting, Rule Tracing and download the trace files.
NOTE: The files are in *.xml format.
Attached to this article is an example rule engine tracing rule set that you can use.