topic Re: Palo session application is undefined, traffic is dropped in Next-Generation Firewall Discussions

Palo session application is undefined, traffic is dropped

abai — Wed, 13 Mar 2024 08:36:45 GMT

HI All,

We have PA5220, we have Pulse VPN in DMZ area, and when i try to connect vpn, i can see the sessions showing in PA, but application shows undefine, then i can not login the vpn after timeout. I also can not ping to VPN address(DNAT address). Would you please help check? Thank.

I have attached the session picture int the attachment

Andy

Re: Palo session application is undefined, traffic is dropped

reaper — Wed, 13 Mar 2024 10:51:54 GMT

can you share how your security rule and NAT rule are configured?

it's very likely there is a mismatch or something missing in either

Re: Palo session application is undefined, traffic is dropped

abai — Wed, 13 Mar 2024 15:19:59 GMT

@reaper

Thanks for your quick response , only China users can not connect the Canada VPN, other countries are working fine. That is wired.

Re: Palo session application is undefined, traffic is dropped

reaper — Fri, 15 Mar 2024 14:05:39 GMT

china prohibits VPN connections to other countries, so maybe your connection is being blocked?