The network environment of a company is shown in the figure below. The Athena NGFW device is deployed at the front end of a server to protect against internal and external attacks. The Athena NGFW device is deployed in a virtual network with 1 and 2 serving as a pair of virtual lines, and 3 and 4 serving as a pair of virtual lines. When an Internet terminal PC (100.100.100.1) accesses a server (172.16.10.1), it cannot open the page normally. The troubleshooting result reveals that the session abnormality occurred since the traffic passed through the Athena NGFW twice. Therefore, a second-passthrough needs to be enabled to avoid this issue.

Step 1.Check Enable to enable second-passthrough and click Add to create second-passthrough traffic. See the figure below.

Step 2.Second-passthrough needs to be configured for both inbound and outbound traffic. The configuration results are shown in the following figure.

Step 3.The Internet terminal PC (100.100.100.1) accesses the server (172.16.10.1) again and can open the page normally.