Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.95
Athena NGFW (Next-Generation Firewall) {{ breadTitle }} User Manual O&M Management Emergency Event Handling Exception or Network Disconnection of Major Business System
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Exception or Network Disconnection of Major Business System")}}

Exception or Network Disconnection of Major Business System

{{ $t('productDocDetail.updateTime') }}: 2025-12-25
  1. Enable Precise Traffic Analysis for this business system to check whether it returns to normal. If so, view the interception logs to find out modules denying inbound and outbound packets, and modify the policy. Disable Precise Traffic Analysis to test whether the service access returns to normal. If not, enable Precise Traffic Analysis again and modify the policy according to the interception logs until failures are repaired.
  1. Ping the Network Secure device from the LAN PC and test whether the PC can access the Network Secure normally. If so, try to ping the gateway and WAN from the Network Secure using command-line tools, to confirm whether the WAN is available.
  2. Enable Detection mode to check whether the user can access the Internet. If so, view the interception logs to find out modules denying inbound and outbound packets, and modify the policy. Disable Disable mode to test whether the Internet access returns to normal. If not, enable Detection mode again and modify the policy according to the interception logs until failures are repaired.
  3. Deploy a device in bridge mode and determine whether bridge interfaces are bypass interfaces that are usually marked on the interface panel. If they are not marked, eth0 and eth2 ports are regarded as a pair of bypass interfaces. If the bypass interfaces are used as network bridge interfaces, turn off the device and test again.
  4. Turn off the device and check whether the service returns to normal. If the eth0 and eth2 ports are not bypass interfaces, connect the uplink and downlink to a pair of bypass interfaces to check whether the service returns to normal or directly skip the firewall and test again.
  5. If you still fail to troubleshoot, skip the device and test again.
  6. After that, if the business system returns to normal, contact Sangfor Technical Support to check whether the device is abnormal.
  7. If you still fail to troubleshoot, check whether the configurations of other network devices are abnormal.