topic Re: Global Counters if packet is dropped by QOS in Next-Generation Firewall Discussions

Global Counters if packet is dropped by QOS

zGomez — Fri, 09 Aug 2024 11:12:13 GMT

Hi,

Is there any global counter that might indicate if my session is beeing dropped by QOS?

I have an issue where my BGP connection to prisma access drops but the tunnel to prisma access is always up.

The issue is intermittent.

If i would setup a global counter and filter on the bgp peer ip and keep the filter on. When i leave the ssh session will the counters still increase? Or show up after like say 12 hours later.

Re: Global Counters if packet is dropped by QOS

aleksandar.astardzhiev — Fri, 09 Aug 2024 12:40:38 GMT

Hi @zGomez ,

Sorry, I don't have answer to your question, but in the mean time - have you try to setup packet capture for this traffic capturing on "drop" stage, in addition to "receive" and "transmist" stages. This should at least confirm your suspicious that firewall is dropping the traffic. If drop capture file contain packets you can start looking at counters for actual reason.