This section provides information about troubleshooting firewall issues. Determining Firewall Rules that Apply on an ESXi HostTo troubleshoot firewall issues with an ESXi host, you can look at the firewall rules that apply on the host. Determining Firewall Rules that Apply on a KVM HostTo troubleshoot firewall issues with a KVM host, you can look at the firewall rules that apply on the host. Firewall Packet LogsIf logging is enabled for firewall rules, you can look at the firewall packet logs to troubleshoot issues. On an ESXi Host, the getrules Command Shows an Unknown MAC AddressOn an ESXi host, after configuring a layer-2 firewall rule with one MAC set as source and another MAC set as destination, the getrules command on the host shows the destination MAC set having an unknown address. Stateful Edge Firewall Not WorkingStateful Edge firewall does not work between Tier-0 uplinks.