Block Port Overflow

Local Interface Spoofing

Suspicious Activity Monitoring

Adaptive Threat Prevention

-l

-i

-D

-d

While executing fw monitor, you need to specify an expression so that it captures the required traffic instead of all traffic

While running fw monitor on a busy firewall, the –ci and –co switches can be used to limit the number of packets captured

While running fw monitor, it resets all the debug flags

During a fw monitor, the firewall will have to process more packets because SecureXL acceleration should be disabled