Validating the failopen function 33Procedure 18Procedure stepsStep Action1 Fill in all the information in the fields marked required .2 Fill in the optional field, when there is a known issue that is notfixed yet.--End--Troubleshooting an IS that does not block trafficThis section describes troubleshooting an IS that does not block traffic asexpected.Procedure 19Procedure stepsStep Action1 Create the Interface Set with the Inline or InlineFailopenoptions selected.2 Configure the IPS policy.3 Configure the rules and select these rules as the Drop status.4 Ensure that both the hosts are connected to both the inline orInline Failopeninterfaces.--End--Validating the failopen functionThis section describes the validation process when the failopen functiondoes not work properly.Procedure 20Procedure stepsStep Action1 Ensure that the Interface Set is failopen.2 Ensure that the policy is IPS.3 Ensure that both endHosts are connected to both sides of thefailopen card.4 Ensure that the cables are correct.Nortel TPS 4.7Threat Protection System Troubleshooting GuideNN47240-700 01.01 Standard11 2007Copyright © 2007 Nortel Networks.
