topic Re: Session Count is stuck and not going higher in VM-Series in the Private Cloud

Session Count is stuck and not going higher

oktay.nabili — Wed, 24 Jul 2024 17:56:45 GMT

Hello,

I've set up a vm firewall for testing purposes. This firewall will be used in lab environments where users will scan lab machines.

However, I am encountering an issue where the session count never exceeds 1025, even though the scanning machine attempts to create over 10,000 sessions per second. After a while, all connections to the lab environment are dropped. To my knowledge, we don't have any threat prevention or similar rules in place that could be causing this.

On our physical firewall (pa-445), similar scans cause the session usage percentage to increase significantly, as expected. We would like to achieve the same behavior with the PA-VM.

Thanks in advance.

#vsphere

Re: Session Count is stuck and not going higher

oktay.nabili — Wed, 24 Jul 2024 17:57:31 GMT

here is how it looks

Re: Session Count is stuck and not going higher

PavelK — Wed, 24 Jul 2024 23:00:40 GMT

Hello @oktay.nabili

thanks for post.

If your PA-VM is unlicensed, the session limited is expected. While unlicensed, a firewall supports a maximum of 1,200 sessions. Here is the reference in documentation: what happens when licenses expire.

Kind Regards

Pavel