Trace ingress and egress
Platform operations: Trace ingress and egress. Starts when: Continuous. Steps: Record every connection via nettrace; View /network; Investigate. Done when: Every connection shows source, destination and time. Rules that apply: FCA SYSC 13.