Module

Test Item

Verification Content

Expected Result

Network Layer Validation

Interface Connectivity

All interfaces are UP and operational

Links are normal

Gateway Connectivity

Upstream/downstream devices can ping each other

ICMP successful

Routing Table Accuracy

Default and static routes are correct

Outbound paths match the design

Business Function Validation

Internal Network to Internet Access

Typical internal subnets can access the Internet

Communication normal, NAT effective

Access to Key Business Systems

ERP, OA, CRM, etc.

Login and operations function properly

External Access to Internal Servers

Public > DMZ service access

Access successful, correct policy hit

Port Mapping Verification

Check NAT mapping (ports/public IPs)

Translation correct

VPN Connectivity

IPsec VPN Tunnel Status

Tunnel established successfully, SA status UP

Connection stable

SSL VPN Login

Client login successful

Connection established, internal subnets accessible

VPN Traffic Flow

Ping and resource access both directions

Connectivity normal

Security Policy & Log Validation

Policy Hit Verification

Key policies show increasing hit count

Correct policies logged

Log Record Check

Access and security logs generated

Complete and searchable

IPS/Anti-Virus

Download test files or simulate attacks

Alerts triggered correctly

URL Filtering / Application Control

Test specific blocked sites/apps

Policy enforced correctly

User Authentication Validation

Local User Authentication

Portal login

Login successful, logs recorded

AD/Radius Authentication

Domain user login

Authentication successful

User Display and Policy Match

Policy identifies username

Username matched correctly

High Availability & Link Redundancy

HA Failover

Simulate primary device failure

Backup device takes over, no service interruption

Link Detection and Switching

Failover to backup link when primary fails

Normal outbound switching

Performance & Resource Monitoring

CPU/Memory Usage

CPU and memory below 70%

Within normal range

Session Count & Concurrency

Stable under normal business load

No abnormal spikes or packet loss

Traffic Statistics & Log Delay

Real-time monitoring reflects traffic accurately

Display normal