topic Re: Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine ... in Cloud NGFW for AWS Discussions

Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine when NGFW bypassed

SGopal11 — Wed, 22 Jun 2022 16:10:44 GMT

Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine when NGFW bypassed

Re: Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine ...

dtaneja — Wed, 22 Jun 2022 15:42:13 GMT

Greetings from Palo Alto Networks!

I saw your post, and request you to confirm whether the Cloud NGFW resetting or dropping traffic (app shows incomplete) for all or for particular traffic.

Please have a look at the below document:-
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClibCAC

Regards,
Devanshu Taneja
Product specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/cloud-ngfw-help-center/ct-p/Cloud_NGFW

Re: Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine ...

SGopal11 — Wed, 22 Jun 2022 15:48:52 GMT

Three-Way Handshake is failing only when it goes through the Palo Alto NGFW however if I bypass it works fine.

it drops traffic for all TCP traffic - Ping and traceroute are the only one works

Please refer to the diagram on my original post

Re: Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine ...

ssyed — Wed, 22 Jun 2022 16:47:16 GMT

Hi, Can you please check the AWS route table and rulestack?

Re: Cloud NGFW resetting or dropping traffic (app shows incomplete) although the traffic is fine ...

SGopal11 — Wed, 22 Jun 2022 17:11:36 GMT

Hi Ssyed, Yes, that looks good as well - when I tweak the route table and bypass the NGFW endpoint it all works well.. But when I point it to NGFW endpoint the TCP handshakes doesnt get completed. Ping and traceroute works good. Rule Stack also has rules allowed