debug flow filter module-bypass-info
If a certain security module doesn't block the request as expected, it might be due to the request being allowed by a precedent module, causing it to skip all the following modules. To check which modules might have such an effect, allowing a request to pass before reaching the current one, you can use this command.
To use this command, your administrator account’s access control profile requires only r permission in any profile area. For details, see Permissions.
Syntax
diagnose debug flow filter module-bypass-info <module name>
Below is an example of the command and its printout:
Related topics