Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.39
Athena NGFW (Next-Generation Firewall) {{ breadTitle }} User Manual O&M Management Emergency Event Handling Exception or Network Disconnection of Major Business System
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Exception or Network Disconnection of Major Business System")}}

Exception or Network Disconnection of Major Business System

{{ $t('productDocDetail.updateTime') }}: 2026-01-07
  1. Enable Precise traffic analysis for this business system to check whether it returns to normal. If so, view the interception logs to find out modules denying inbound and outbound packets, and modify the policy. Disable Precise traffic analysis to test whether the service access returns to normal. If not, enable Precise traffic analysis again and modify the policy according to the interception logs until failures are repaired.
  2. Ping to the NGAF device from the LAN PC and test whether the PC can access the NGAF normally. If so, try to ping to the gateway and WAN from the NGAF using command-line tools, to confirm whether the WAN is available.
  3. Enable Global passthrough and analysis to check whether the user can access the Internet. If so, view the interception logs to find out modules denying inbound and outbound packets, and modify the policy. Disable Global passthrough and analysis to test whether the Internet access returns to normal. If not, enable Global passthrough and analysis again and modify the policy according to the interception logs until failures are repaired.
  4. Deploy a device in bridge mode and confirm whether bridge interfaces are bypass interfaces that are usually marked on the interface panel. If they are not marked, eth0 and eth2 ports are regarded as a pair of bypass interfaces. If the bypass interfaces are used as network bridge interfaces, turn off the device and test again.
  5. Turn off the device and check whether the service returns to normal. If the eth0 and eth2 ports are not bypass interfaces, connect the uplink and downlink to a pair of bypass interfaces to check whether the service returns to normal, or directly skip the firewall and test again.
  6. If you still fail to troubleshoot, skip the device and test again.
  7. After that, if the business system returns to normal, contact the technical support engineer from Sangfor to check whether the device is abnormal.
  8. If you still fail to troubleshoot, check whether the configurations of other network devices are abnormal.