HTTP Response traffic

viri4to — Thu, 23 Dec 2021 19:05:29 GMT

Hi guys, I have been seeing that when making an http connection that goes through the PA firewall, the request is logged, but the return message is not, that is, when in panorama I filter the traffic by source ip I see the http request but I do not see the response from the server. I mean, I don't see any log with source ip = server destination ip = client is this normal?

Re: HTTP Response traffic

PavelK — Thu, 23 Dec 2021 20:50:09 GMT

Thank you for the post @viri4to

What you described is expected. The session was initiated from client and not from server. If you want to get information whether there was response from server for HTTP traffic, you can go to Traffic Log, then add "Bytes Sent" and "Bytes Received", you can also add: "URL Category" for more visibility. If there is response from web server, then you will see count in: "Bytes Received":

By clicking on magnifying glass on very left side of log, you can get detailed log. Under section: Details you can see Received Packets and Bytes.

Kind Regards

Pavel

topic HTTP Response traffic in Panorama Discussions

HTTP Response traffic

Re: HTTP Response traffic