When troubleshooting a scenario where an internal workstation fails to ping an external partner firewall across the WAN, which of the following checks should an administrator perform? (Select all that apply)

### Why this is right The lab lists the W1 address and gateway, routing, source NAT, the existing Internet security policy, and ping settings as checks for a failed WAN test. Each can prevent the test packet from reaching the partner or its reply from returning. ### The concept Troubleshooting should follow the packet path. The workstation needs a correct address and gateway; the firewall needs a route; source NAT must translate the private source; and the security policy and ping settings must allow the test. Changing the VPN tunnel interface does not fix this prerequisite WAN test. ### The other options - **E. Replace the VPN tunnel interface with a workstation interface**: The lab does not recommend this; it confuses the WAN prerequisite with VPN forwarding configuration. ### Terms - **NAT**: Network Address Translation. Changes network addresses in traffic. - **ICMP**: Internet Control Message Protocol. Supports diagnostic messages such as ping. - **W1**: The workstation named condorID-W1 in the lab. ### Remember Trace failed WAN connectivity from host settings through routing, translation, and policy.